AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2023-20896

MEDIUM · CVSS 5.9 EPSS 0.91%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-06-22 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.9. It affects VMware, VMWare, vCenter. It may lead to a denial-of-service condition.

CVE
CVE-2023-20896
Severity
MEDIUM
CVSS
5.9
EPSS
0.91%
VMware VMWare vCenter

Original NVD Description

The VMware vCenter Server contains an out-of-bounds read vulnerability in the implementation of the DCERPC protocol. A malicious actor with network access to vCenter Server may trigger an out-of-bounds read by sending a specially crafted packet leading to denial-of-service of certain services (vmcad, vmdird, and vmafdd).

Related CVEs

Other vulnerabilities affecting the same vendor(s)