{"id":3112,"date":"2021-09-22T13:52:15","date_gmt":"2021-09-22T18:52:15","guid":{"rendered":"https:\/\/lg-staging.lougcloud.com\/?p=3112"},"modified":"2025-07-24T14:05:35","modified_gmt":"2025-07-24T19:05:35","slug":"vmware-issues-emergency-patch-for-vsphere-and-vcenter","status":"publish","type":"post","link":"https:\/\/lg-staging.lougcloud.com\/?p=3112","title":{"rendered":"VMware Issues Emergency Patch for vSphere and vCenter"},"content":{"rendered":"\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-85bp3-f856194ef33e7bc72ec0d3bf98278fce\">\n.flex_column.av-85bp3-f856194ef33e7bc72ec0d3bf98278fce{\nborder-radius:0px 0px 0px 0px;\npadding:0px 0px 0px 0px;\n}\n<\/style>\n<div  class='flex_column av-85bp3-f856194ef33e7bc72ec0d3bf98278fce av_one_full  avia-builder-el-0  avia-builder-el-no-sibling  first flex_column_div av-zero-column-padding  '     ><p><br \/>\n<section  class='av_textblock_section av-k0pon615-114d01afa1a8988881100bbf49ddc8fc '  ><div class='avia_textblock' ><h1>If your organization uses VMware\u2019s flagship products (vSphere and vCenter), we recommend updating these immediately.<\/h1>\n<\/div><\/section><br \/>\n<section  class='av_textblock_section av-k0pop9td-8497efcd251a401b4e3e5b055a544ee1 '  ><div class='avia_textblock' ><p>In a <a href=\"https:\/\/www.vmware.com\/security\/advisories\/VMSA-2021-0020.html\" target=\"_blank\" rel=\"noopener\">news release posted on the company website<\/a>, VMware disclosed a significant bug in both products and urged users to drop everything and patch it. The virtualization giant also offered a workaround (more on that below).<\/p>\n<p>In the blog post, the company said: &#8220;A file upload vulnerability that can be used to execute commands and software on the vCenter Server Appliance. This vulnerability can be used by anyone who can reach vCenter Server over the network to gain access, regardless of the configuration settings of vCenter Server.&#8221;<\/p>\n<p>It went on to say, &#8220;In this era of ransomware it is safest to assume that an attacker is already inside your network somewhere, on a desktop and perhaps even in control of a user account,&#8221; states Virtzilla&#8217;s blog post about the flaw, adding, &#8220;which is why we strongly recommend declaring an emergency change and patching as soon as possible.&#8221;<\/p>\n<p>VMware recommends rapid patching but does point out the downfalls (and overall the effectiveness) of workarounds in <a href=\"https:\/\/core.vmware.com\/vmsa-2021-0020-questions-answers-faq\" target=\"_blank\" rel=\"noopener\">the release<\/a>.<\/p>\n<\/div><\/section><\/p><\/div>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":3,"featured_media":3114,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[50,48,49],"class_list":["post-3112","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity-news","tag-vcenter","tag-vmware","tag-vsphere"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Urgent VMware vSphere &amp; vCenter Bug Fix: Immediate Patch Recommended<\/title>\n<meta name=\"description\" content=\"VMware has revealed a critical bug in vSphere and vCenter that exposes your network to potential attacks. Learn why you need to patch this vulnerability immediately and how Louisville Geek can help secure your VMware environment.\" \/>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Urgent VMware vSphere &amp; vCenter Bug Fix: Immediate Patch Recommended\" \/>\n<meta property=\"og:description\" content=\"VMware has revealed a critical bug in vSphere and vCenter that exposes your network to potential attacks. Learn why you need to patch this vulnerability immediately and how Louisville Geek can help secure your VMware environment.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/lg-staging.lougcloud.com\/?p=3112\" \/>\n<meta property=\"og:site_name\" content=\"Louisville Geek\" \/>\n<meta property=\"article:published_time\" content=\"2021-09-22T18:52:15+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-07-24T19:05:35+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/lg-staging.lougcloud.com\/wp-content\/uploads\/2021\/09\/shutterstock_1929311708.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"628\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Ben Lawrence\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Lawrence\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Urgent VMware vSphere & vCenter Bug Fix: Immediate Patch Recommended","description":"VMware has revealed a critical bug in vSphere and vCenter that exposes your network to potential attacks. Learn why you need to patch this vulnerability immediately and how Louisville Geek can help secure your VMware environment.","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"Urgent VMware vSphere & vCenter Bug Fix: Immediate Patch Recommended","og_description":"VMware has revealed a critical bug in vSphere and vCenter that exposes your network to potential attacks. Learn why you need to patch this vulnerability immediately and how Louisville Geek can help secure your VMware environment.","og_url":"https:\/\/lg-staging.lougcloud.com\/?p=3112","og_site_name":"Louisville Geek","article_published_time":"2021-09-22T18:52:15+00:00","article_modified_time":"2025-07-24T19:05:35+00:00","og_image":[{"width":1200,"height":628,"url":"https:\/\/lg-staging.lougcloud.com\/wp-content\/uploads\/2021\/09\/shutterstock_1929311708.png","type":"image\/png"}],"author":"Ben Lawrence","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Ben Lawrence","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/lg-staging.lougcloud.com\/?p=3112#article","isPartOf":{"@id":"https:\/\/lg-staging.lougcloud.com\/?p=3112"},"author":{"name":"Ben Lawrence","@id":"https:\/\/lg-staging.lougcloud.com\/#\/schema\/person\/1e8874ec46062e6e46fbbba43fc82d56"},"headline":"VMware Issues Emergency Patch for vSphere and vCenter","datePublished":"2021-09-22T18:52:15+00:00","dateModified":"2025-07-24T19:05:35+00:00","mainEntityOfPage":{"@id":"https:\/\/lg-staging.lougcloud.com\/?p=3112"},"wordCount":345,"publisher":{"@id":"https:\/\/lg-staging.lougcloud.com\/#organization"},"image":{"@id":"https:\/\/lg-staging.lougcloud.com\/?p=3112#primaryimage"},"thumbnailUrl":"https:\/\/lg-staging.lougcloud.com\/wp-content\/uploads\/2021\/09\/shutterstock_1929311708.png","keywords":["vCenter","vmware","vsphere"],"articleSection":["Cybersecurity"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/lg-staging.lougcloud.com\/?p=3112","url":"https:\/\/lg-staging.lougcloud.com\/?p=3112","name":"Urgent VMware vSphere & vCenter Bug Fix: Immediate Patch Recommended","isPartOf":{"@id":"https:\/\/lg-staging.lougcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/lg-staging.lougcloud.com\/?p=3112#primaryimage"},"image":{"@id":"https:\/\/lg-staging.lougcloud.com\/?p=3112#primaryimage"},"thumbnailUrl":"https:\/\/lg-staging.lougcloud.com\/wp-content\/uploads\/2021\/09\/shutterstock_1929311708.png","datePublished":"2021-09-22T18:52:15+00:00","dateModified":"2025-07-24T19:05:35+00:00","description":"VMware has revealed a critical bug in vSphere and vCenter that exposes your network to potential attacks. Learn why you need to patch this vulnerability immediately and how Louisville Geek can help secure your VMware environment.","breadcrumb":{"@id":"https:\/\/lg-staging.lougcloud.com\/?p=3112#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/lg-staging.lougcloud.com\/?p=3112"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/lg-staging.lougcloud.com\/?p=3112#primaryimage","url":"https:\/\/lg-staging.lougcloud.com\/wp-content\/uploads\/2021\/09\/shutterstock_1929311708.png","contentUrl":"https:\/\/lg-staging.lougcloud.com\/wp-content\/uploads\/2021\/09\/shutterstock_1929311708.png","width":1200,"height":628},{"@type":"BreadcrumbList","@id":"https:\/\/lg-staging.lougcloud.com\/?p=3112#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/lg-staging.lougcloud.com\/"},{"@type":"ListItem","position":2,"name":"VMware Issues Emergency Patch for vSphere and vCenter"}]},{"@type":"WebSite","@id":"https:\/\/lg-staging.lougcloud.com\/#website","url":"https:\/\/lg-staging.lougcloud.com\/","name":"Louisville Geek","description":"Empowering Local Businesses and National Enterprises with Comprehensive IT Services","publisher":{"@id":"https:\/\/lg-staging.lougcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/lg-staging.lougcloud.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/lg-staging.lougcloud.com\/#organization","name":"Louisville Geek","url":"https:\/\/lg-staging.lougcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/lg-staging.lougcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/lg-staging.lougcloud.com\/wp-content\/uploads\/2019\/10\/lougeek_full_logo-black-1.png","contentUrl":"https:\/\/lg-staging.lougcloud.com\/wp-content\/uploads\/2019\/10\/lougeek_full_logo-black-1.png","width":1671,"height":506,"caption":"Louisville Geek"},"image":{"@id":"https:\/\/lg-staging.lougcloud.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/lg-staging.lougcloud.com\/#\/schema\/person\/1e8874ec46062e6e46fbbba43fc82d56","name":"Ben Lawrence","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/82e4d3ae8ca51a80f9e1c400a5a63cd408dddc6d07c994878451703381610b2e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/82e4d3ae8ca51a80f9e1c400a5a63cd408dddc6d07c994878451703381610b2e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/82e4d3ae8ca51a80f9e1c400a5a63cd408dddc6d07c994878451703381610b2e?s=96&d=mm&r=g","caption":"Ben Lawrence"},"description":"Managing Partner at Louisville Geek, an IT services company supporting small and medium-sized businesses. Since joining in 2009, he has helped grow the company while leading its marketing efforts. Based in Louisville, Kentucky, Ben brings more than 15 years of experience in technology services and business leadership. View Ben's LinkedIn","url":"https:\/\/lg-staging.lougcloud.com\/?author=3"}]}},"_links":{"self":[{"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=\/wp\/v2\/posts\/3112","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3112"}],"version-history":[{"count":3,"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=\/wp\/v2\/posts\/3112\/revisions"}],"predecessor-version":[{"id":7428,"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=\/wp\/v2\/posts\/3112\/revisions\/7428"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=\/wp\/v2\/media\/3114"}],"wp:attachment":[{"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3112"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3112"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lg-staging.lougcloud.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3112"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}