[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXQMx2O0UDCh4gBpel_4b1o_BS--L4G8m8DuDvI5J8NA":3,"g5a-risk:CVE-2024-37085":171},{"success":4,"data":5,"meta":168},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":41,"epssPercentile":29,"epssTimeSeries":42,"severity":43,"affectedProducts":44,"affectedProductsCount":57,"references":58,"referencesCount":57,"weaknesses":72,"weaknessesCount":86,"isActivelyExploited":4,"cisaInfo":87,"otxData":29,"relatedBlogPosts":88,"seoMetadata":89,"configurations":114,"relatedVendorCves":159,"notableEvents":160},"CVE-2024-37085","What is CVE-2024-37085?","VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously  configured to use AD for user management https:\u002F\u002Fblogs.vmware.com\u002Fvsphere\u002F2012\u002F09\u002Fjoining-vsphere-hosts-to-active-directory.html  by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.","VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an E...","2024-06-25T15:15:12.377","2026-06-17T07:37:43.94",7.2,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":38,"CVSSMetricV2":39,"CVSSMetricV40":40},[16,32],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"security@vmware.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H","NETWORK","LOW","HIGH","REQUIRED","UNCHANGED",6.8,"MEDIUM",null,0.9,5.9,{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":37,"ImpactScore":31},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":36,"Scope":26,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":24,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"NONE",1.2,[],[],[],0.2677,[41,41,41,41,41,41,41],"High",[45,50,54],{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"vmware","cloud_foundation","*","cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*",{"vendor":46,"product":51,"version":52,"criteria":53,"vulnerable":4},"esxi","7.0","cpe:2.3:o:vmware:esxi:7.0:*:*:*:*:*:*:*",{"vendor":46,"product":51,"version":55,"criteria":56,"vulnerable":4},"8.0","cpe:2.3:o:vmware:esxi:8.0:-:*:*:*:*:*:*",3,[59,65,67],{"url":60,"source":61,"tags":62},"https:\u002F\u002Fsupport.broadcom.com\u002Fweb\u002Fecx\u002Fsupport-content-notification\u002F-\u002Fexternal\u002Fcontent\u002FSecurityAdvisories\u002F0\u002F24505","Broadcom",[63,64],"Patch","Vendor Advisory",{"url":60,"source":61,"tags":66},[63,64],{"url":68,"source":69,"tags":70},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2024-37085","CISA",[71],"US Government Resource",[73,81],{"id":74,"name":75,"description":76,"extendedDescription":77,"status":78,"abstraction":79,"structure":80},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",{"id":82,"name":83,"description":84,"extendedDescription":77,"status":78,"abstraction":85,"structure":80},"CWE-305","Authentication Bypass by Primary Weakness","The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.","Base",2,{"shortDescription":77,"requiredAction":77,"vulnerabilityName":77,"dateAdded":29},[],{"title":90,"metaDescription":91,"keywords":92,"canonicalUrl":93,"structuredData":94},"What is CVE-2024-37085? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-37085, a high severity cyber security vulnerability from 2024. VMware ESXi contains an authentication bypass vulnerability...","CVE-2024-37085, CVE-2024-37085 vulnerability, CVE-2024-37085 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, vmware security, cloud_foundation vulnerability, esxi vulnerability","\u002Fwhat-is\u002Fcve-2024-37085",{"@context":95,"@type":96,"headline":90,"description":91,"datePublished":10,"dateModified":11,"author":97,"publisher":101,"about":105,"mainEntityOfPage":109,"articleSection":112,"keywords":113},"https:\u002F\u002Fschema.org","TechArticle",{"@type":98,"name":99,"url":100},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":98,"name":99,"url":100,"logo":102},{"@type":103,"url":104},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":106,"name":6,"description":107,"additionalType":108},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":110,"@id":111},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-37085","Cybersecurity","CVE-2024-37085, CVE-2024-37085 vulnerability, CVE-2024-37085 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[115],{"Operator":29,"Negate":29,"Nodes":116},[117],{"Operator":118,"Negate":119,"CPEMatch":120},"OR",false,[121,125,127,129,132,135,138,141,144,147,150,153,156],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":122,"VersionStartExcluding":29,"VersionStartIncluding":123,"VersionEndExcluding":124,"VersionEndIncluding":29},"7FA8DFE6-9C74-4711-A8AF-3B170876A1F9","4.0","5.2",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":126,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"48D2E2D5-A0B8-4AF1-BF4A-30154F754C94",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":128,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"7A1A402A-9262-4B97-A0B7-E5AE045E394D",{"Vulnerable":4,"Criteria":130,"MatchCriteriaID":131,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:o:vmware:esxi:8.0:a:*:*:*:*:*:*","FE44B379-9943-4DD1-8514-26F87482AFA8",{"Vulnerable":4,"Criteria":133,"MatchCriteriaID":134,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:o:vmware:esxi:8.0:b:*:*:*:*:*:*","2A797377-8945-4D75-AA68-A768855E5842",{"Vulnerable":4,"Criteria":136,"MatchCriteriaID":137,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:o:vmware:esxi:8.0:c:*:*:*:*:*:*","79D84D76-54BE-49E9-905C-7D65B4B42D68",{"Vulnerable":4,"Criteria":139,"MatchCriteriaID":140,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:o:vmware:esxi:8.0:update_1:*:*:*:*:*:*","2F8767F7-7C3D-457D-9EAC-E8A30796F751",{"Vulnerable":4,"Criteria":142,"MatchCriteriaID":143,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:o:vmware:esxi:8.0:update_1a:*:*:*:*:*:*","29AF8474-2D7A-4C5A-82B9-7A873AD90C2E",{"Vulnerable":4,"Criteria":145,"MatchCriteriaID":146,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:o:vmware:esxi:8.0:update_1c:*:*:*:*:*:*","7781A2CA-D927-48CD-9932-AE42B7BA1EFE",{"Vulnerable":4,"Criteria":148,"MatchCriteriaID":149,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:o:vmware:esxi:8.0:update_1d:*:*:*:*:*:*","18FD08C9-5895-4BF4-BBE0-C2DDA5F6B836",{"Vulnerable":4,"Criteria":151,"MatchCriteriaID":152,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:o:vmware:esxi:8.0:update_2:*:*:*:*:*:*","360C1B71-5360-4379-B0DE-63BB8F5E6DA2",{"Vulnerable":4,"Criteria":154,"MatchCriteriaID":155,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:o:vmware:esxi:8.0:update_2b:*:*:*:*:*:*","B16ED7C1-9881-452A-8BE0-EDDEAEFE3D7B",{"Vulnerable":4,"Criteria":157,"MatchCriteriaID":158,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"cpe:2.3:o:vmware:esxi:8.0:update_2c:*:*:*:*:*:*","ED92209F-FBD6-43F9-9A15-3842B139FCC9",[],[161],{"id":162,"eventType":163,"eventTime":164,"details":165,"label":166,"color":167},"e936a670-aed7-4f40-9674-f911c9f26b8f","LOW_EPSS_DELTA","2025-06-11T10:09:58.936328+00:00","Daily EPSS score decreased by 0.223 on 2024-06-27","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":169,"version":170},1792248595437,"2.0",{"score":172,"band":43,"action":173,"scoredAt":174},76,"Emergency patch","2026-10-16T07:02:58.497913+00:00"]