CVE-2023-34048

VMware vCenter Server was exploited in the wild via CVE-2023-34048, enabling remote code execution through an out-of-bounds write in the DCERPC protocol.

This vulnerability allows remote attackers to execute arbitrary code on vCenter Server instances, posing a severe risk to defense-industrial-base organizations relying on VMware infrastructure for mission-critical operations. The fact that this vulnerability is actively exploited in the wild and linked to ransomware campaigns means organizations must prioritize patching immediately to prevent unauthorized access and data exfiltration. DIB orgs should verify their vCenter versions against the latest security advisories and ensure all systems are patched before the next maintenance window.

Shame score — Active exploitation in the wild combined with remote code execution capabilities creates a high-risk scenario for defense contractors and government agencies.