Summary
generated automatically from NVD dataVMware vCenter Server Appliance (vCSA) 5.1, in versions before Update 1, contains a code injection flaw (CWE-94) in its Virtual Appliance Management Interface (VAMI). A remote user who is already authenticated and has VAMI access can exploit it to run arbitrary programs with root privileges on the appliance. The issue is rated HIGH with a CVSS v2.0 score of 9.0.
NVD description
VMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to execute arbitrary programs with root privileges by leveraging Virtual Appliance Management Interface (VAMI) access.
EPSS · FIRST.org
1.7%probability of exploitation in the next 30 days
Higher than 77% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-18, recomputed daily by FIRST.org.
CVSS v2.0 Score
Information
- Published
- 1 mai 2013
- Updated
- 16 juin 2026
- Status
- Modified
- Source
- cve@mitre.org
Affected products
Weaknesses (CWE)
References (2)
Similar CVEs
Other vulnerabilities of type CWE-94
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.