Vulnerability Spotlight: Denial-of-service vulnerability discovered in VMWare vCenter
Summary: Cisco Talos discovered a pre-authentication denial-of-service vulnerability in VMware vCenter Server, tracked as TALOS-2022-1588 and CVE-2022-31698, in a handler of the content library. A specially crafted HTTP header sent in an HTTP request can trigger the denial of service, and Talos confirmed the issue could be exploited in VMware vCenter Server 6.5 Update 3t, with a fix available and Snort rule 60408 released to detect exploitation attempts.
What's compelling: The flaw sits in vCenter, the platform that centrally controls every virtual machine and ESXi hypervisor in vSphere, and it can be triggered before authentication by a single crafted HTTP request.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2022-31698
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026