SZB-9c4028e9de
CISA adds VMware ESX zero-day to KEV after reported China-linked exploitation
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Broadcom VMware
- Product
- ESX
- First seen
Summary
CISA added a security flaw affecting Broadcom VMware ESX to its Known Exploited Vulnerabilities catalog on Wednesday. The item reports, citing CrowdStrike, that China-linked hackers exploited the zero-day to reduce audit trail visibility.
If you use Broadcom VMware
Check whether your ESX hosts are running a version covered by Broadcom's advisory and apply the patch or mitigation
Review ESX logs and audit trails for signs of unauthorized changes
Follow CISA's KEV remediation deadline for federal and affected organizations
What the sources say 1
· Bluesky: “The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulnerabilities (KEV) catalog, after CrowdS…” Source