[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXQMx2O0UDCh4gBpel_4b1o_BS--L4G8m8DuDvI5J8NA":3,"g5a-risk:CVE-2024-37085":170},{"success":4,"data":5,"meta":167},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":29,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":56,"references":57,"referencesCount":56,"weaknesses":71,"weaknessesCount":85,"isActivelyExploited":4,"cisaInfo":86,"otxData":29,"relatedBlogPosts":87,"seoMetadata":88,"configurations":113,"relatedVendorCves":158,"notableEvents":159},"CVE-2024-37085","What is CVE-2024-37085?","VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously  configured to use AD for user management https:\u002F\u002Fblogs.vmware.com\u002Fvsphere\u002F2012\u002F09\u002Fjoining-vsphere-hosts-to-active-directory.html  by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.","VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an E...","2024-06-25T15:15:12.377","2025-10-30T19:52:34.23",7.2,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":38,"CVSSMetricV2":39,"CVSSMetricV40":29},[16,32],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"security@vmware.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H","NETWORK","LOW","HIGH","REQUIRED","UNCHANGED",6.8,"MEDIUM",null,0.9,5.9,{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":37,"ImpactScore":31},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":36,"Scope":26,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":24,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"NONE",1.2,[],[],0.2677,[40,40,40,40,40,40,40],"High",[44,49,53],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"vmware","cloud_foundation","*","cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*",{"vendor":45,"product":50,"version":51,"criteria":52,"vulnerable":4},"esxi","7.0","cpe:2.3:o:vmware:esxi:7.0:*:*:*:*:*:*:*",{"vendor":45,"product":50,"version":54,"criteria":55,"vulnerable":4},"8.0","cpe:2.3:o:vmware:esxi:8.0:-:*:*:*:*:*:*",3,[58,64,66],{"url":59,"source":60,"tags":61},"https:\u002F\u002Fsupport.broadcom.com\u002Fweb\u002Fecx\u002Fsupport-content-notification\u002F-\u002Fexternal\u002Fcontent\u002FSecurityAdvisories\u002F0\u002F24505","Broadcom",[62,63],"Patch","Vendor Advisory",{"url":59,"source":60,"tags":65},[62,63],{"url":67,"source":68,"tags":69},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2024-37085","CISA",[70],"US Government Resource",[72,80],{"id":73,"name":74,"description":75,"extendedDescription":76,"status":77,"abstraction":78,"structure":79},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",{"id":81,"name":82,"description":83,"extendedDescription":76,"status":77,"abstraction":84,"structure":79},"CWE-305","Authentication Bypass by Primary Weakness","The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.","Base",2,{"shortDescription":76,"requiredAction":76,"vulnerabilityName":76,"dateAdded":29},[],{"title":89,"metaDescription":90,"keywords":91,"canonicalUrl":92,"structuredData":93},"What is CVE-2024-37085? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2024-37085, a high severity cyber security vulnerability from 2024. VMware ESXi contains an authentication bypass vulnerability...","CVE-2024-37085, CVE-2024-37085 vulnerability, CVE-2024-37085 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, vmware security, cloud_foundation vulnerability, esxi vulnerability","\u002Fwhat-is\u002Fcve-2024-37085",{"@context":94,"@type":95,"headline":89,"description":90,"datePublished":10,"dateModified":11,"author":96,"publisher":100,"about":104,"mainEntityOfPage":108,"articleSection":111,"keywords":112},"https:\u002F\u002Fschema.org","TechArticle",{"@type":97,"name":98,"url":99},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":97,"name":98,"url":99,"logo":101},{"@type":102,"url":103},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":105,"name":6,"description":106,"additionalType":107},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":109,"@id":110},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2024-37085","Cybersecurity","CVE-2024-37085, CVE-2024-37085 vulnerability, CVE-2024-37085 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[114],{"Operator":29,"Negate":29,"Nodes":115},[116],{"Operator":117,"Negate":118,"CPEMatch":119},"OR",false,[120,124,126,128,131,134,137,140,143,146,149,152,155],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":121,"VersionStartExcluding":29,"VersionStartIncluding":122,"VersionEndExcluding":123,"VersionEndIncluding":29},"7FA8DFE6-9C74-4711-A8AF-3B170876A1F9","4.0","5.2",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":125,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"48D2E2D5-A0B8-4AF1-BF4A-30154F754C94",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":127,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"7A1A402A-9262-4B97-A0B7-E5AE045E394D",{"Vulnerable":4,"Criteria":129,"MatchCriteriaID":130,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:o:vmware:esxi:8.0:a:*:*:*:*:*:*","FE44B379-9943-4DD1-8514-26F87482AFA8",{"Vulnerable":4,"Criteria":132,"MatchCriteriaID":133,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:o:vmware:esxi:8.0:b:*:*:*:*:*:*","2A797377-8945-4D75-AA68-A768855E5842",{"Vulnerable":4,"Criteria":135,"MatchCriteriaID":136,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:o:vmware:esxi:8.0:c:*:*:*:*:*:*","79D84D76-54BE-49E9-905C-7D65B4B42D68",{"Vulnerable":4,"Criteria":138,"MatchCriteriaID":139,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:o:vmware:esxi:8.0:update_1:*:*:*:*:*:*","2F8767F7-7C3D-457D-9EAC-E8A30796F751",{"Vulnerable":4,"Criteria":141,"MatchCriteriaID":142,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:o:vmware:esxi:8.0:update_1a:*:*:*:*:*:*","29AF8474-2D7A-4C5A-82B9-7A873AD90C2E",{"Vulnerable":4,"Criteria":144,"MatchCriteriaID":145,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:o:vmware:esxi:8.0:update_1c:*:*:*:*:*:*","7781A2CA-D927-48CD-9932-AE42B7BA1EFE",{"Vulnerable":4,"Criteria":147,"MatchCriteriaID":148,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:o:vmware:esxi:8.0:update_1d:*:*:*:*:*:*","18FD08C9-5895-4BF4-BBE0-C2DDA5F6B836",{"Vulnerable":4,"Criteria":150,"MatchCriteriaID":151,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:o:vmware:esxi:8.0:update_2:*:*:*:*:*:*","360C1B71-5360-4379-B0DE-63BB8F5E6DA2",{"Vulnerable":4,"Criteria":153,"MatchCriteriaID":154,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:o:vmware:esxi:8.0:update_2b:*:*:*:*:*:*","B16ED7C1-9881-452A-8BE0-EDDEAEFE3D7B",{"Vulnerable":4,"Criteria":156,"MatchCriteriaID":157,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:o:vmware:esxi:8.0:update_2c:*:*:*:*:*:*","ED92209F-FBD6-43F9-9A15-3842B139FCC9",[],[160],{"id":161,"eventType":162,"eventTime":163,"details":164,"label":165,"color":166},"e936a670-aed7-4f40-9674-f911c9f26b8f","LOW_EPSS_DELTA","2025-06-11T10:09:58.936328+00:00","Daily EPSS score decreased by 0.223 on 2024-06-27","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":168,"version":169},1793204168365,"2.0",{"score":171,"band":42,"action":172,"scoredAt":173},74,"Emergency patch","2026-07-01T10:33:18.235221+00:00"]