Unscored severity · published Nov 20, 2012
CVE-2012-5703
The vSphere API in VMware ESXi 4.1 and ESX 4.1 allows remote attackers to cause a denial of service (host daemon crash) via an invalid value in a (1) RetrieveProp or (2)…
–
CVSS
2.4%
EPSS
No
On KEV
Description
The vSphere API in VMware ESXi 4.1 and ESX 4.1 allows remote attackers to cause a denial of service (host daemon crash) via an invalid value in a (1) RetrieveProp or (2) RetrievePropEx SOAP request.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-5703
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-5703
www.coresecurity.com
http://www.coresecurity.com/content/vmware-esx-input-validation-error
www.securityfocus.com
http://www.securityfocus.com/bid/56571
www.securitytracker.com
http://www.securitytracker.com/id?1027782
Vendor Advisory
http://www.vmware.com/security/advisories/VMSA-2012-0016.html
More from ESXi
9.8
CVE-2020-3992
VMware ESXi OpenSLP Use-After-Free Vulnerability
9.8
CVE-2019-5544
VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability
8.2
CVE-2025-22225
VMware ESXi Arbitrary Write Vulnerability
8.2
CVE-2025-22224
VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
7.8
CVE-2010-3904
Linux Kernel Improper Input Validation Vulnerability