CVE-2021-21978 in the critical feed json
VMware View Planner 4.x prior to 4.6 Security Patch 1 contains a remote code execution vulnerability.
published 2021-03-03 5 y ago modified 2026-06-17 4 mo ago also EUVD-2021-9149
- cvss
- 9.8
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 99.0%
- EPSS 99.0% chance of exploitation in 30 days, percentile 99.9%
- public exploits
- 1
- Metasploit, plus a Nuclei check
Summary
VMware View Planner 4.x prior to 4.6 Security Patch 1 contains a remote code execution vulnerability. Improper input validation and lack of authorization leading to arbitrary file upload in logupload web application. An unauthorized attacker with network access to View Planner Harness could upload and execute a specially crafted file leading to remote code execution within the logupload container.
Patch / fix
- vmware view_planner 4.6
Timeline
- First public exploit (Metasploit exploit/linux/http/vmware_view_planner_4_6_uploadlog_rce)
- Published
Exploit prediction
99.00% chance of exploitation in the next 30 days, higher than 99.9% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- Metasploit exploit/linux/http/vmware_view_planner_4_6_uploadlog_rce VMware View Planner Unauthenticated Log File Upload RCE metasploit exploit, excellent rank, 2021-03-02
- Nuclei template VMware View Planner <4.6 SP1- Remote Code Execution nuclei detection template
- packetstormsecurity.com http://packetstormsecurity.com/files/161879/VMware-View-Planner-4.6-Remote-Code-Execution.html referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Affected products
- n/a VMware View Planner
Classification
References
-
packetstormsecurity.com
/files/161879/VMware-View-Planner-4.6-Remote-Code-Execution.html
exploit, third-party-advisory, vdb-entry
-
vmware.com
/security/advisories/VMSA-2021-0003.html
vendor-advisory
Sources
- CVE List CVE-2021-21978
- NVD CVE-2021-21978
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.