VMware CVEs — PoCs and detection rules¶
13 VMware vulnerabilities with detection-only proof-of-concept code and Docker labs; 13 ship ready-to-deploy detection and prevention rules (Snort, YARA, Nginx, Apache). For authorized testing and blue-team detection engineering.
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2024-37079 — VMware vCenter Heap Overflow | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-37080 — VMware vCenter Heap Overflow 2 | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38812 — VMware vCenter RCE | Critical (9.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-22243 — Spring Web Redirect | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-22259 — Spring Web Redirect | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-22262 — Spring Web Redirect | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-22273 — VMware vCenter DoS | High (8.1) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-37081 — VMware vCenter EoP | High (7.8) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-37087 — VMware vCenter SSRF | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-38813 — VMware vCenter EoP | High (7.5) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-22234 — Spring Security Bypass | High (7.4) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-22274 — VMware vCenter RCE | High (7.2) | Snort, YARA, Nginx, Apache | ✅ |
| CVE-2024-37085 — VMware ESXi Auth Bypass | High (7.2) | Snort, YARA, Nginx, Apache | ✅ |