CVE-2024-37085
VMware ESXi Authentication Bypass Vulnerability
- Published
- Jun 25, 2024
- Updated
- Oct 21, 2025
- Assigning CNA
- vmware
- Evidence observed
- Jul 30, 2024
Primary CVSS
nvd · CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HModerate · next 30 days
- Percentile
- 98.0%
- Model date
- Oct 17, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
CISA Known Exploited
This CVE appears in the CISA Known Exploited Vulnerabilities catalog.
Summary
VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management https://blogs.vmware.com/vsphere/2012/09/joining-vsphere-hosts-to-active-directory.html by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.
Sources
- CVE-2024-37085Exploit
Python exploit for CVE-2024-37085, an authentication bypass in domain-joined ESXi hypervisors, enabling unauthenticated shell upload and full administrator access.
- Vmware-ESXIExploit
CVE-2024-37085 unauthenticated shell upload to full administrator on domain-joined esxi hypervisors.
- CVE-2024-37085Exploit
Vulnerability Scanner for CVE-2024-37085 and Exploits ( For Educational Purpose only)
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.