CVE-2024-37085

CVE Enrichment

CVSS: 7.2 HIGH
EPSS: 26.77%
EPSS Percentile: 98.01%
CISA KEV: YES — Known Exploited Vulnerability

Description

VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management https://blogs.vmware.com/vsphere/2012/09/joining-vsphere-hosts-to-active-directory.html by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: security@vmware.com
Published: 25-Jun-2024 22:15
Last Modified: 17-Jun-2026 14:37
EPSS Date: 2026-10-16
CWE: CWE-287, CWE-305

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:H /
                            UI:N /
                            S:U /
                            C:H /
                            I:H /
                            A:H

CISA KEV Details

Date Added: 2024-07-30
Remediation Due: 2024-08-20
Known Ransomware Campaign Use: Known
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notes: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505; https://nvd.nist.gov/vuln/detail/CVE-2024-37085

Affected Products / Versions

vmware / cloud_foundation
Version / affected range: * · from (inclusive) 4.0 · before (exclusive) 5.2
cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*
vmware / esxi
Version / affected range: 7.0
cpe:2.3:o:vmware:esxi:7.0:*:*:*:*:*:*:*
vmware / esxi
Version / affected range: 8.0
cpe:2.3:o:vmware:esxi:8.0:-:*:*:*:*:*:*
vmware / esxi
Version / affected range: 8.0
cpe:2.3:o:vmware:esxi:8.0:a:*:*:*:*:*:*
vmware / esxi
Version / affected range: 8.0
cpe:2.3:o:vmware:esxi:8.0:b:*:*:*:*:*:*
vmware / esxi
Version / affected range: 8.0
cpe:2.3:o:vmware:esxi:8.0:c:*:*:*:*:*:*
vmware / esxi
Version / affected range: 8.0
cpe:2.3:o:vmware:esxi:8.0:update_1:*:*:*:*:*:*
vmware / esxi
Version / affected range: 8.0
cpe:2.3:o:vmware:esxi:8.0:update_1a:*:*:*:*:*:*
vmware / esxi
Version / affected range: 8.0
cpe:2.3:o:vmware:esxi:8.0:update_1c:*:*:*:*:*:*
vmware / esxi
Version / affected range: 8.0
cpe:2.3:o:vmware:esxi:8.0:update_1d:*:*:*:*:*:*
vmware / esxi
Version / affected range: 8.0
cpe:2.3:o:vmware:esxi:8.0:update_2:*:*:*:*:*:*
vmware / esxi
Version / affected range: 8.0
cpe:2.3:o:vmware:esxi:8.0:update_2b:*:*:*:*:*:*
vmware / esxi
Version / affected range: 8.0
cpe:2.3:o:vmware:esxi:8.0:update_2c:*:*:*:*:*:*

References

Last enrichment sync: 17-Oct-2026 13:37
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

For example, CVE-2024-37085 highlights this hypervisor risk perfectly. Huntress Shares Practical Defenses Against Ransomware Targeting ESXi Hypervisors

People (3)

Threat Actors (2)

MITRE ATT&CK (7)

Products (4)

Tools (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.