Severity
High
Analysis Summary
CVE-2021-21976
VMware VSphere Replication could allow a remote authenticated attacker to execute arbitrary commands on the system. An attacker could exploit this vulnerability to execute arbitrary commands on the system with administrative privileges.
Impact
Remote code execution
Affected Vendors
VMware
Affected Products
- VMware VSphere Replication 6.5.0
- VMware VSphere Replication 8.1.0
- VMware VSphere Replication 8.2.0
- VMware VSphere Replication 8.3.0
Remediation
Refer to vendor advisory for the complete list of affected products and their respective patches.
https://www.vmware.com/security/advisories/VMSA-2021-0001.html