Exploited Vulnerabilities DailyCVE-2024-37085: VMware ESXi
EPSS26.7%No. 1046 of 1739 in KEV
CVE year2024listed the same year
Same vendor in KEV26
Same product3
| Field | Value |
|---|---|
| Vendor | VMware |
| Product | ESXi |
| Name | VMware ESXi Authentication Bypass Vulnerability |
| Added to KEV | 2024-07-30 |
| US federal due date | 2024-08-20 |
| Ransomware use | Known |
| CWE | CWE-305 |
CISA description
VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.
Other entries for this product
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2025-22225 | VMware ESXi | 2025-03-04 | 1.0% | Known |
| CVE-2020-3992 | VMware ESXi | 2021-11-03 | 83.0% | Known |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A VMware ESXi vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2024-07-30.