« Volver al listado

CVE-2024-38818

Estado: AplazadaMedia (6.7)—

VMware NSX contains a local privilege escalation vulnerability.

An authenticated malicious actor may exploit this vulnerability to obtain permissions from a separate group role than previously assigned.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Vmware — NSXAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-38818",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-38818",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-10-09T21:05:05.383848Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security@vmware.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.7,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "HIGH",
          "availabilityImpact": "LOW",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.5,
        "exploitabilityScore": 1.2
      }
    ]
  },
  "affected": [
    {
      "source": "security@vmware.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "VMware NSX, VMware Cloud Foundation",
          "versions": [
            {
              "status": "affected",
              "version": "VMware NSX 4.x, VMware Cloud Foundation 5.x"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:vmware:nsx:*:*:*:*:*:*:*:*"
          ],
          "vendor": "vmware",
          "product": "nsx",
          "versions": [
            {
              "status": "affected",
              "version": "4.1.0",
              "lessThan": "4.2.1",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:vmware:nsx-t:*:*:*:*:*:*:*:*"
          ],
          "vendor": "vmware",
          "product": "nsx-t",
          "versions": [
            {
              "status": "affected",
              "version": "3.2.0",
              "lessThan": "3.2.4.1",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*"
          ],
          "vendor": "vmware",
          "product": "cloud_foundation",
          "versions": [
            {
              "status": "affected",
              "version": "5.0",
              "lessThan": "Async_Patch_to_4.2.1",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-10-09T20:15:08.230",
  "references": [
    {
      "url": "https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25047",
      "source": "security@vmware.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@vmware.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-269"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "VMware NSX contains a local privilege escalation vulnerability. \n\nAn authenticated malicious actor may exploit this vulnerability to obtain permissions from a separate group role than previously assigned."
    },
    {
      "lang": "es",
      "value": "VMware NSX contiene una vulnerabilidad de escalada de privilegios locales. Un actor malintencionado autenticado puede aprovechar esta vulnerabilidad para obtener permisos de un rol de grupo distinto al asignado anteriormente."
    }
  ],
  "lastModified": "2026-06-17T07:41:06.297",
  "sourceIdentifier": "security@vmware.com"
}