CVE-2024-38814

Deeper analysis

CVE-2024-38814 is an authenticated SQL injection vulnerability, tracked under CWE-89, that affects VMware HCX. A malicious authenticated user with non-administrator privileges can supply specially crafted SQL queries to the HCX manager, enabling unauthorized remote code execution.

An attacker who already possesses valid low-privileged credentials on the affected system can exploit the flaw over the network without user interaction. Successful exploitation yields full control over the HCX manager, including the ability to read, modify, or delete data and execute arbitrary code with high impact to confidentiality, integrity, and availability, as reflected in the CVSS 8.8 score.

The Broadcom security advisory at the referenced URL states that updates are available to remediate the issue in affected VMware HCX products. The EPSS score has reached a peak of 0.2797 with a current value of 0.2504, indicating moderate and relatively stable exploitation probability since disclosure.