CVE-2013-1405 Auth bypass in n/a

Critical 10.0 Published 15 Feb 2013 Updated 17 Sep 2024

Remote attackers can execute arbitrary code or cause denial of service via improper management authentication protocol implementation in VMware vCenter and ESXi.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2013-1405?

CVE-2013-1405 is a critical authentication bypass vulnerability in Vmware Esx, published on 15 Feb 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

VMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5, VMware vSphere Client 4.0 before Update 4b and 4.1 before Update 3a, VMware VI-Client 2.5, VMware ESXi 3.5 through 4.1, and VMware ESX 3.5 through 4.1 do not properly implement the management authentication protocol, which allow remote servers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.

Weakness: CWE-287

Which versions are affected by CVE-2013-1405?

It affects 6 products.

Products include Vmware Esx, Vmware Esxi, Vmware Vcenter Server, Vmware Vi-Client, Vmware Virtualcenter, Vmware Vsphere Client.

How do I fix CVE-2013-1405?

No fix has been published for CVE-2013-1405 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2013-1405 being exploited?

There is no known exploitation of CVE-2013-1405 in the wild and no public exploit code.

All Vmware Esx vulnerabilities

Sources

Also known as GHSA-v887-6g7g-j8hv.