Uncovering weaknesses in Apple macOS and VMWare vCenter: 12 vulnerabilities in RPC implementation
Summary: Cisco Talos researchers fuzzed the DCERPC implementation shared by VMware vCenter and Apple macOS and found 12 vulnerabilities in the RPC code. On vCenter they focused on the VMware Certificate Management Service (vmcad, port 2014), VMware Directory Service (vmdird, port 2012) and VMware Authentication Framework (vmafdd, port 2020), which are reachable from the local network by default and use the Likewise-Open DCERPC library to parse packets before authentication.
Key Takeaway: The vulnerable parsing code sits in front of authentication on services that are exposed to the local network by default, so an attacker does not need credentials to reach it. Talos also notes the code's fatal-exception handling can force a service to be destroyed, a pattern it says easily leads to denial-of-service conditions.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026