VanRoey Logo
Search
VanRoey Logo
menu
Header image overlay

VMware vCenter Server multiple heap-overflow

Our support will regularly inform you of important events here.

With a (maximum!) CVSSv3 score of 9.8, this issue should be fixed immediately.

VMware vCenter Server multiple heap-overflow

VMware has fixed 2 critical vulnerabilities (CVE-2024-37079 + CVE-2024-37080) impacting vCenter Server versions 7.0 & 8.0, as well as Cloud Foundation versions 4.x & 5.x.

A hacker with network access to the vCenter Server could exploit this vulnerability by sending a specially crafted network packet that might lead to execution of external code. For now, Broadcom has not received any reports of abuse of this vulnerability.

Both CVEs are 'heap-overflow' vulnerabilities in the implementation of the DCE/RPC protocol. They have high risk scores because the attacks can be performed remotely without any user interaction.

Take action

So upgrading/patching is a must. Temporarily, you could also restrict access via advanced firewall configurations to minimise possible attack attempts.

Customers who use our Managed Services enjoy are safe. They have since been patched or are being patched by appointment.
The impact of the operation/upgrade is that VCenter needs to be restarted, which (only) VCenter unreachable for up to one hour.

Feel free to contact us to fix this problem for you. You can do this by mail at support@vanroey.be or count: 014 470 600. You can also have a create a ticket.

Can't create tickets? Ask here to get an account. If our Engineer needs to remotely control your PC, he or she will ask you to run this software .

Download 'remote assistance'

Let our experts guide you

Like thousands of organisations, rely on our knowledge & experience to work out your ideal network, data centre, IT security, CRM / ERP, meeting rooms or digital workplace...

Ask your question
Frame21 Logo
"As CEO of a coworking space, you obviously don't want visitors or permanent residents to be unable to start their meetings on time because of infrastructure problems."
Stéphanie Beyens - CEO Frame 21
Stéphanie Beyens CEO at Frame21
Read Case!
"The need for a good ERP system was growing, especially as we were running up against the limits of Excel. The VanRoey cloud-based ERP system, based on Microsoft Business Central and Dynamics 365 CRM, proved to be the perfect match."
Dirk Evenepoel Co-manager BATO
Read Case!
NMBS Logo
"We will get calls from all over Belgium to support people. Then it is ideal to have central management platforms. This allows us to configure or solve almost everything remotely."
Filip d'Haenens
Filip D'Haenens Sr. Architect at YPTO (IT company SNCB)
Read Case!
Indupol logo | VanRoey.be
"We now have one totally integrated package that (new) employees can quickly find their way around. Everything runs centrally from sales order to production, purchasing, accounting and all figures end up in clear reporting."
Bram Van Baelen, Indupol | VanRoey.be
Bram Van Baelen Indupol
Read Case!
Transparency
Alides Logo | VanRoey.be
"The great added value of VanRoey's integrated solution lies in the faster and more mobile availability of information. Moreover, they can be confident that the data they see is correct and up to date."
Thomas de Moor
Thomas De Moor Financial Controller, Alides
Read Case!
Transparency
"The result is a much better running IT infrastructure that is monitored and supported 24/7 by the people of VanRoey. Today we have far fewer problems and employees in other time zones are also assured of solid IT services!"
Guido Peeters IT Manager Biobest
Read Case!
Transparency

Newsletter  | Linkedin

LinkedIn Spotify Instagram Facebook-f Youtube Newspaper

Partnerships – Satisfaction survey – Conditions – Privacy & cookies – CSR/ESG Policy

  BC-Certified-logo_ISO-27001

Our Solutions

Managed IT Services
Security audit
Expertise Services

IT Security Strategy
Train Your Staff (Awareness)
Network Security
Firewalls
Antivirus
Endpoint Defence & Response (EDR)
Cybersecurity for Government (Smals)
Smart AI camera surveillance

VanRoey Private Cloud (IaaS)
Servers & Storage
Apps & device management
Backup Solutions
Networking & Wifi
Internet line & IP VPN
Azure Cloud Solutions
AI-powered CCTV

Copilot AI
Microsoft 365 / Office 365
Microsoft Teams
Microsoft SharePoint
CTOUCH Touchscreens
HP Business Notebooks
Dell XPS & Latitudes
Professional Printers

ERP & CRM With Dynamics 365
Power Platform
Dynamics 365 Real Estate

Events

Training

Inspiration Centre

Jobs

About

ESG

Kempus

Customer Area

Contact
Inspiration Days

Next session: 21 Nov

IT Inspiration Days

Our own Inspiration Centre in Geel provides the perfect setting to welcome you this autumn and take you into the latest trends within the IT world.

Info & Sessions!

Attention: limited number of places!