{"affected":[{"defaultStatus":"unaffected","product":"VMware vCenter Server","source":"CNA: vmware","vendor":"n/a","versions":[{"lessThan":"8.0 U2d","status":"affected","version":"8.0","versionType":"custom"},{"lessThan":"7.0 U3r","status":"affected","version":"7.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"VMware Cloud Foundation","source":"CNA: vmware","vendor":"n/a","versions":[{"status":"affected","version":"5.x"},{"status":"affected","version":"4.x"}]},{"defaultStatus":"unknown","product":"cloud_foundation","source":"ADP: CISA-ADP","vendor":"vmware","versions":[{"lessThan":"6.0","status":"affected","version":"4.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"vcenter_server","source":"ADP: CISA-ADP","vendor":"vmware","versions":[{"lessThan":"8.0u2d","status":"affected","version":"8.0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"vcenter_server","source":"ADP: CISA-ADP","vendor":"vmware","versions":[{"lessThan":"7.0u3r","status":"affected","version":"7.0","versionType":"custom"}]}],"cpeConfigurations":[{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:vmware:vcenter_server:8.0:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:8.0:a:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:8.0:b:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:8.0:c:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:8.0:update1:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:8.0:update1a:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:8.0:update1b:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:8.0:update1c:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:8.0:update1d:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:8.0:update1e:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:8.0:update2:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:8.0:update2a:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:8.0:update2b:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:8.0:update2c:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"},{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:vmware:vcenter_server:7.0:-:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:7.0:a:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:7.0:b:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:7.0:c:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:7.0:d:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:7.0:update1:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:7.0:update1a:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:7.0:update1c:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:7.0:update1d:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:7.0:update2:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:7.0:update2a:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:7.0:update2b:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:7.0:update2c:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:7.0:update2d:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:7.0:update3:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:7.0:update3a:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:7.0:update3c:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:7.0:update3d:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:7.0:update3e:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:7.0:update3f:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:7.0:update3g:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:7.0:update3h:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:7.0:update3i:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:7.0:update3j:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:7.0:update3k:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:7.0:update3l:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:7.0:update3m:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:7.0:update3n:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:7.0:update3o:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:7.0:update3p:*:*:*:*:*:*","vulnerable":true},{"criteria":"cpe:2.3:a:vmware:vcenter_server:7.0:update3q:*:*:*:*:*:*","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"},{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*","versionEndExcluding":"5.2","versionStartIncluding":"4.0","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"cveId":"CVE-2024-37081","cwes":["CWE-556"],"description":"The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user with non-administrative privileges may exploit these issues to elevate privileges to root on vCenter Server Appliance.","epss":{"date":"2026-11-03","percentile":0.92228,"score":0.04989},"exploits":[],"kev":null,"metrics":[{"score":7.8,"severity":"high","source":"CNA: vmware","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},{"score":7.8,"severity":"high","source":"NVD: security@vmware.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1793744240783,"publishedAt":1718689400580,"references":[{"source":"CNA: vmware","tags":[],"url":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24453"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24453"},{"source":"security@vmware.com","tags":["Vendor Advisory"],"url":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24453"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24453"}],"remediation":[],"revision":"fac1e6da4454ed809f40edd4e2e8cd8185b0858fe408227e42deb486192f5c64","sources":[{"modifiedAt":1793742757271,"name":"CNA: vmware","retrievedAt":1793743958751,"url":"https://www.cve.org/CVERecord?id=CVE-2024-37081"},{"modifiedAt":1793744240783,"name":"NVD","retrievedAt":1793751356556,"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-37081"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793744005950,"url":"https://api.first.org/data/v1/epss?cve=CVE-2024-37081"}],"ssvc":{"assessedAt":1720670132852,"automatable":"no","exploitation":"poc","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"CVE-2024-37081","updatedAt":1793751356556}