KEV ✓ (8 z 9) · ransomware EPSS 1.00 (nejvyšší)
Ransomware at the hypervisor layer: how attackers use ESXi and vCenter features for malicious purposes
Our Global Emergency Response Team (GERT) recently investigated an engagement in which an adversary destroyed an organization’s virtualization estate over a 10-day period. The campaign targeted four ESXi hosts, every virtual machine hosted on them, both vCenter Server Appliances, and all connected backup infrastructure. The ransom notes identified the attacker as the BlackNevas group, first observed in November 2024. What’s interesting about this attack is that no virtualization layer…
VMware RU
CVE v události 9
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2021-21972 | 9.8 3.1 · CISA-ADP | KEV ✓ | 1.00 |
| CVE-2021-21974 | 8.8 3.1 · CISA-ADP | – | 0.45 |
| CVE-2021-21985 | 9.8 3.1 · CISA-ADP | KEV ✓ | 1.00 |
| CVE-2021-22005 | 9.8 3.1 · CISA-ADP | KEV ✓ | 1.00 |
| CVE-2023-34048 | 9.8 3.1 · vmware | KEV ✓ | 0.99 |
| CVE-2024-37085 | 6.8 3.1 · vmware | KEV ✓ | 0.27 |
| CVE-2024-38812 | 9.8 3.1 · vmware | KEV ✓ | 0.55 |
| CVE-2025-22224 | 9.3 3.1 · vmware | KEV ✓ | 0.02 |
| CVE-2025-22225 | 8.2 3.1 · vmware | KEV ✓ | 0.01 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.