Ransomware gangs are actively exploiting a vulnerability in VMware ESXi hypervisors to deploy encryptors and wreak havoc among victim organizations, experts have warned.
In a blog post covering the issue, Microsoft claimed VMware’s ESXi was vulnerable to an authentication bypass flaw that allowed ransomware operators to obtain full administrative permissions on domain-joined hypervisors. The vulnerability is tracked as CVE-2024-37085, and has a severity score of 6.8 (medium), according to the NVD.
