Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2017-4947: vRealize Automation and vSphere Containers enable remote code execution

CVE-2017-4947 · published 8 years ago

Summary

The vRealize Automation (versions 7.2 and 7.3) and vSphere Integrated Containers (versions before 1.3) can be tricked into running malicious code through a flaw in their Xenon component. This could let an attacker take control of the appliance from outside your network. Install the latest patches or upgrade to the supported versions as soon as possible.

What to do

Update vmware vsphere_integrated_containers to version 1.3.0 or later.

Affected software

Vendor	Product	Affected versions
vmware	vrealize_automation	7.2.0 7.3.0 `cpe:2.3:a:vmware:vrealize_automation:7.2.0:::::::*`
vmware	vsphere_integrated_containers	< 1.3.0 `cpe:2.3:a:vmware:vsphere_integrated_containers::::::::`

Original advisory text

VMware vRealize Automation (7.3 and 7.2) and vSphere Integrated Containers (1.x before 1.3) contain a deserialization vulnerability via Xenon. Successful exploitation of this issue may allow remote...

References

http://www.securityfocus.com/bid/102852 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1040289 Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1040290 Third Party Advisory VDB Entry
https://www.vmware.com/security/advisories/VMSA-2018-0006.html Patch Vendor Advisory

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker full control (estimated)

Severity

9.8 Critical

Exploitation

9% chance of attack within 30 days

Type

CWE-502Deserialization of Untrusted Data

Timeline

Published29 Jan 2018

Updated15 Oct 2026

First seen29 Sep 2026

Sources

CVE-2017-4947 · NVD

Track software like this

Free during beta