Broadcom Product Security Update Advisory (CVE-2024-38814)
Overview
An update has been released to address vulnerabilities in Broadcom Products. Users of the affected versions are advised to update to the latest version.
Affected Products
CVE-2024-38814
- VMware HCX versions: ~ 4.10.1 (excluded)
- VMware HCX versions: ~ 4.9.2 (excluded)
- VMware HCX versions: ~ 4.8.3 (excluded)
Resolved Vulnerabilities
Vulnerability that allows a malicious authenticated user without administrator privileges to enter a specially crafted SQL query and perform unauthorized remote code execution in HCX Manager (CVE-2024-38814)
Vulnerability Patches
Vulnerability patches have been made available in the latest updates. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.
CVE-2024-38814
- VMware HCX version: 4.10.1
- VMware HCX version: 4.9.2
- VMware HCX version: 4.8.3
Referenced Sites
[1] CVE-2024-38814 Detail
https://nvd.nist.gov/vuln/detail/CVE-2024-38814
[2] VMSA-2024-0021: VMware HCX addresses an authenticated SQL injection vulnerability (CVE-2024-38814)