#BHASIA Briefing "Center Lost: How the DCERPC Vulnerabilities Changed the Fate of ESXi" you'll be provided a detailed overview of the DCERPC protocol and the four vulnerabilities we uncovered in its implementation within vCenter Server, which have been assigned CVE numbers CVE-2024-37079, CVE-2024-37080, CVE-2024-38812, and CVE-2024-38813. Register now >> https://t.co/z6RNI1vSjp
When CVE-2024-37079 was patched by VMware, it received quite a bit of attention. In their latest blog, the Trend Micro Research team details the root cause of this vCenter bug and shows how it can be used for RCE. Read all about it at https://t.co/uBGoiEpXMD
Our security researchers @S0dukuN, @zhz__6951, @Mr_LiuYue have finished their talk about VMware Virtualization bug hunting journey at #defcon32!
Check the DEFCON media server to see their works, or meet us at #HITB BKK!