VMware vSphere

 View Only

  • 1.  CVE- 2021- 21985 VMware

    Posted Jan 23, 2023 08:14 PM

    Didn't know where else to put this that made sense,  but we have one old 2008 R2 (yes, I know, we are working on retiring it, but until then....) it is showing vulnerable for CVE- 2021- 21985 VMware.  But I can find no trace of VMWare on this server,  no vsphere, no remnants of anything, not even a mention in the registry. It does have the Veeam backup agent and install service, but that's it. I have no idea why it is popping for this CVE.  Is there any other thing that can cause it to show positive for this?

    Any thoughts or suggestions or comments are greatly appreciated.



  • 2.  RE: CVE- 2021- 21985 VMware

    Posted Jan 25, 2023 08:37 AM

    Hi,

    If i read the CVE : https://www.vmware.com/security/advisories/VMSA-2021-0010.html, theVMware Solution impacted are vCenter and VCF.

    Have you go an install of some composante into your server ?

    If not, check if you have machine on your network with the same IP address ?

    Rgds