¡¾·ì϶¹«¸æ¡¿VMware vCenter ServerÈÏÖ¤ºÅÁîÖ´Ðзì϶(CVE-2025-41225)

°ä²¼¹¦·ò 2025-05-22

Ò»¡¢·ì϶¸ÅÊö


·ìϼûû³Æ

VMware vCenter ServerÈÏÖ¤ºÅÁîÖ´Ðзì϶

CVE   ID

CVE-2025-41225

·ì϶ÀàÐÍ

ºÅÁîÖ´ÐÐ

·¢ÏÖ¹¦·ò

2025-05-22

·ì϶ÆÀ·Ö

8.8

·ì϶µÈ¼¶

¸ßΣ

¹¥»÷ÏòÁ¿

±¾µØ

ËùÐèȨÏÞ

µÍ

ÀûÓÃÄѶÈ

µÍ

Óû§½»»¥

²»±ØÒª

PoC/EXP

δ¹«¿ª

ÔÚÒ°ÀûÓÃ

δ·¢ÏÖ


vCenterÊÇVMwareÌṩµÄ¼¯ÖÐÖÎÀíƽ̨£¬ £¬£¬£¬£¬ÓÃÓÚÖÎÀíVMware vSphere»·¾³ÖеÄÐé¹¹»¯×ÊÔ´¡£¡£¡£¡£¡£¡£ËüÔÊÐíÖÎÀíÔ±¶ÔÐé¹¹»ú¡¢Ö÷»ú¡¢´æ´¢ºÍÍøÂç½øÐÐͳһÖÎÀíºÍ¼à¿Ø¡£¡£¡£¡£¡£¡£vCenterÌṩְÄÜÈçÐé¹¹»ú²¿Êð¡¢×Ô¶¯»¯ÖÎÀí¡¢×ÊÔ´ÓÅ»¯ºÍ¸ß¿ÉÓÃÐÔ£¬ £¬£¬£¬£¬Ô®ÊÔìóÒµÌá¸ßÐé¹¹»¯»·¾³µÄЧÄܺͽýÝÐÔ¡£¡£¡£¡£¡£¡£vCenterÊÇ´ó¹æÄ£Êý¾ÝÖÐÐĺÍÔÆ»·¾³Öв»³É»òȱµÄÖÎÀí¹¤¾ß£¬ £¬£¬£¬£¬Ö§³Ö¼¯ÈºÖÎÀí¡¢¸ºÔØƽºâºÍ¹ÊÕϸ´Ô­µÈ¸ß¼¶¸öÐÔ¡£¡£¡£¡£¡£¡£


2025Äê5ÔÂ22ÈÕ£¬ £¬£¬£¬£¬8827Ì«Ñô¼¯Íż¯ÍÅVSRC¼à²âµ½VMware°ä²¼µÄ°²È«²¼¸æ£¬ £¬£¬£¬£¬Ö¸³öVMware vCenter´æÔÚÈÏÖ¤ºÅÁîÖ´Ðзì϶¡£¡£¡£¡£¡£¡£¹¥»÷ÕßÔھ߱¸´´½¨»òÅú¸Ä¾¯±¨ÒÔ¼°Ö´Ðо籾²Ù×÷ȨÏÞʱ£¬ £¬£¬£¬£¬¿ÉÄÜÀûÓø÷ì϶ÔÚvCenter ServerÉÏÖ´ÐÐËÁÒâºÅÁî¡£¡£¡£¡£¡£¡£Èô¸Ã·ì϶±»³É¹¦ÀûÓ㬠£¬£¬£¬£¬¹¥»÷Õß¿ÉÄÜ»ñµÃϵͳ½ÚÔìȨÏÞ»òÀÄÓÃϵͳ£¬ £¬£¬£¬£¬´øÀ´ÑϳÁµÄ°²È«·çÏÕ¡£¡£¡£¡£¡£¡£·ì϶¼¶±ð¸ßΣ£¬ £¬£¬£¬£¬·ì϶ÆÀ·Ö8.8·Ö¡£¡£¡£¡£¡£¡£


¶þ¡¢Ó°ÏìÁìÓò


vCenter Server 8.0 < 8.0 U3e
vCenter Server 7.0 < 7.0 U3v
VMware Cloud Foundation (vCenter) = 5.x
VMware Cloud Foundation (vCenter) = 4.5.x
VMware Telco Cloud Platform (vCenter) 5.x/4.x/3.x/2.x < 8.0 U3e
VMware Telco Cloud Infrastructure (vCenter) 3.x < 8.0 U3e
VMware Telco Cloud Infrastructure (vCenter) 2.x < 7.0 U3v


Èý¡¢°²È«´ëÊ©


3.1 Éý¼¶°æ±¾


¹Ù·½ÒÑ°ä²¼°²È«¸üУ¬ £¬£¬£¬£¬½¨ÒéÊÜÓ°ÏìÓû§¾¡¿ìÉý¼¶¡£¡£¡£¡£¡£¡£
vCenter Server 8.0 >= 8.0 U3e
vCenter Server 7.0 >= 7.0 U3v
VMware Telco Cloud Platform (vCenter) 5.x/4.x/3.x/2.x >= 8.0 U3e
VMware Telco Cloud Infrastructure (vCenter) 3.x >= 8.0 U3e
VMware Telco Cloud Infrastructure (vCenter) 2.x >= 7.0 U3v


3.2 һʱ´ëÊ©


ÔÝÎÞ¡£¡£¡£¡£¡£¡£


3.3 ͨÓý¨Òé


? ¶¨ÆÚ¸üÐÂϵͳ²¹¶¡£¬ £¬£¬£¬£¬Ï÷¼õϵͳ·ì϶£¬ £¬£¬£¬£¬ÌáÉý·þÎñÆ÷µÄ°²È«ÐÔ¡£¡£¡£¡£¡£¡£
? ¼ÓǿϵͳºÍÍøÂçµÄ½Ó¼û½ÚÔ죬 £¬£¬£¬£¬Åú¸Ä·À»ðǽսÊõ£¬ £¬£¬£¬£¬¹Ø¹Ø·Ç±ØÒªµÄÀûÓö˿ڻò·þÎñ£¬ £¬£¬£¬£¬Ï÷¼õ½«Î£ÏÕ·þÎñ£¨ÈçSSH¡¢RDPµÈ£©Â¶³öµ½¹«Íø£¬ £¬£¬£¬£¬Ï÷¼õ¹¥»÷Ãæ¡£¡£¡£¡£¡£¡£
? Ê¹ÓÃÆóÒµ¼¶°²È«²úÆ·£¬ £¬£¬£¬£¬ÌáÉýÆóÒµµÄÍøÂ簲ȫ»úÄÜ¡£¡£¡£¡£¡£¡£
? ¼ÓǿϵͳÓû§ºÍȨÏÞÖÎÀí£¬ £¬£¬£¬£¬ÆôÓöà³É·ÖÈÏÖ¤»úÔìºÍ×îÓ×ȨÏÞ×¼Ôò£¬ £¬£¬£¬£¬Óû§ºÍÈí¼þȨÏÞӦά³ÖÔÚ×îµÍÏ޶ȡ£¡£¡£¡£¡£¡£
? ÆôÓÃÇ¿ÃÜÂëÕ½Êõ²¢ÉèÖÃΪ¶¨ÆÚÅú¸Ä¡£¡£¡£¡£¡£¡£


3.4 ²Î¿¼Á´½Ó


https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25717