Unscored severity · published Oct 12, 2015
CVE-2015-2342
The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not restrict registration of MBeans, which allows remote…
–
CVSS
89%
EPSS
No
On KEV
Description
The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not restrict registration of MBeans, which allows remote attackers to execute arbitrary code via the RMI protocol.
Exploitation
Is it being used?
Exploit prediction (EPSS)89.0% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VS
vCenter Server · VMware
5.0; 5.1; 5.5; 6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-2342
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-2342
seclists.org
http://seclists.org/fulldisclosure/2015/Oct/1
www.securityfocus.com
http://www.securityfocus.com/bid/76930
www.securitytracker.com
http://www.securitytracker.com/id/1033720
Patch
http://www.vmware.com/security/advisories/VMSA-2015-0007.html
www.zerodayinitiative.com
http://www.zerodayinitiative.com/advisories/ZDI-15-455
www.7elements.co.uk
https://www.7elements.co.uk/resources/technical-advisories/cve-2015-2342-vmware-vcenter-remote-code-execution/
More from vCenter Server
9.8
CVE-2026-59310
vCenter directory-traversal vulnerability
9.8
CVE-2024-38813
Privilege escalation vulnerability
9.8
CVE-2024-38812
Heap-overflow vulnerability
9.8
CVE-2024-37079
Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability
9.8
CVE-2023-34048
VMware vCenter Server Out-of-Bounds Write Vulnerability