UpHeron
All vulnerabilities

Servers and applications

CVE-2021-21994

SFCB (Small Footprint CIM Broker) as used in ESXi has an authentication bypass vulnerability. A malicious actor with network access to port 5989 on ESXi may exploit this issue to bypass SFCB authentication by sending a specially crafted request.

Severity
Critical 9.8
Published
13 Jul 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
VMware ESXiServers and applications · cpe:o:vmware:esxi
  • Version 7.0-update_1d
  • Version 7.0-update_1
  • Version 7.0
  • Version 7.0-update_1c
All 236 release lines
  • Version 6.5
  • Version 6.5-650-201701001
  • Version 6.5-650-201703001
  • Version 6.5-650-201703002
  • Version 6.5-650-201704001
  • Version 6.5-650-201707101
  • Version 6.5-650-201707102
  • Version 6.5-650-201707103
  • Version 6.5-650-201707201
  • Version 6.5-650-201707202
  • Version 6.5-650-201707203
  • Version 6.5-650-201707204
  • Version 6.5-650-201707205
  • Version 6.5-650-201707206
  • Version 6.5-650-201707207
  • Version 6.5-650-201707208
  • Version 6.5-650-201707209
  • Version 6.5-650-201707210
  • Version 6.5-650-201707211
  • Version 6.5-650-201707212
  • Version 6.5-650-201707213
  • Version 6.5-650-201707214
  • Version 6.5-650-201707215
  • Version 6.5-650-201707216
  • Version 6.5-650-201707217
  • Version 6.5-650-201707218
  • Version 6.5-650-201707219
  • Version 6.5-650-201707220
  • Version 6.5-650-201707221
  • Version 6.5-650-201710001
  • Version 6.5-650-201712001
  • Version 6.5-650-201803001
  • Version 6.5-650-201806001
  • Version 6.5-650-201808001
  • Version 6.5-650-201810001
  • Version 6.5-650-201810002
  • Version 6.5-650-201811001
  • Version 6.5-650-201811002
  • Version 6.5-650-201811301
  • Version 6.5-650-201901001
  • Version 6.5-650-201903001
  • Version 6.5-650-201905001
  • Version 6.5-650-201908001
  • Version 6.5-650-201910001
  • Version 6.5-650-201911001
  • Version 6.5-650-201911401
  • Version 6.5-650-201911402
  • Version 6.5-650-201912001
  • Version 6.5-650-201912002
  • Version 6.5-650-201912101
  • Version 6.5-650-201912102
  • Version 6.5-650-201912103
  • Version 6.5-650-201912104
  • Version 6.5-650-201912301
  • Version 6.5-650-201912401
  • Version 6.5-650-201912402
  • Version 6.5-650-201912403
  • Version 6.5-650-201912404
  • Version 6.5-650-202005001
  • Version 6.5-650-202006001
  • Version 6.5-650-202007001
  • Version 6.5-650-202010001
  • Version 6.5-650-202011001
  • Version 6.5-650-202011002
  • Version 6.5-650-202102001
  • Version 6.5-650-202102002
  • Version 6.5-650-202102003
  • Version 6.5-650-20191004001
  • Version 6.7
  • Version 6.7-670-201806001
  • Version 6.7-670-201807001
  • Version 6.7-670-201808001
  • Version 6.7-670-201810001
  • Version 6.7-670-201810101
  • Version 6.7-670-201810102
  • Version 6.7-670-201810103
  • Version 6.7-670-201810201
  • Version 6.7-670-201810202
  • Version 6.7-670-201810203
  • Version 6.7-670-201810204
  • Version 6.7-670-201810205
  • Version 6.7-670-201810206
  • Version 6.7-670-201810207
  • Version 6.7-670-201810208
  • Version 6.7-670-201810209
  • Version 6.7-670-201810210
  • Version 6.7-670-201810211
  • Version 6.7-670-201810212
  • Version 6.7-670-201810213
  • Version 6.7-670-201810214
  • Version 6.7-670-201810215
  • Version 6.7-670-201810216
  • Version 6.7-670-201810217
  • Version 6.7-670-201810218
  • Version 6.7-670-201810219
  • Version 6.7-670-201810220
  • Version 6.7-670-201810221
  • Version 6.7-670-201810222
  • Version 6.7-670-201810223
  • Version 6.7-670-201810224
  • Version 6.7-670-201810225
  • Version 6.7-670-201810226
  • Version 6.7-670-201810227
  • Version 6.7-670-201810228
  • Version 6.7-670-201810229
  • Version 6.7-670-201810230
  • Version 6.7-670-201810231
  • Version 6.7-670-201810232
  • Version 6.7-670-201810233
  • Version 6.7-670-201810234
  • Version 6.7-670-201811001
  • Version 6.7-670-201901001
  • Version 6.7-670-201901401
  • Version 6.7-670-201901402
  • Version 6.7-670-201901403
  • Version 6.7-670-201903001
  • Version 6.7-670-201904001
  • Version 6.7-670-201904201
  • Version 6.7-670-201904201-ug
  • Version 6.7-670-201904202
  • Version 6.7-670-201904202-ug
  • Version 6.7-670-201904203
  • Version 6.7-670-201904203-ug
  • Version 6.7-670-201904204
  • Version 6.7-670-201904204-ug
  • Version 6.7-670-201904205
  • Version 6.7-670-201904205-ug
  • Version 6.7-670-201904206
  • Version 6.7-670-201904206-ug
  • Version 6.7-670-201904207
  • Version 6.7-670-201904207-ug
  • Version 6.7-670-201904208
  • Version 6.7-670-201904208-ug
  • Version 6.7-670-201904209
  • Version 6.7-670-201904209-ug
  • Version 6.7-670-201904210
  • Version 6.7-670-201904210-ug
  • Version 6.7-670-201904211
  • Version 6.7-670-201904211-ug
  • Version 6.7-670-201904212
  • Version 6.7-670-201904212-ug
  • Version 6.7-670-201904213
  • Version 6.7-670-201904213-ug
  • Version 6.7-670-201904214
  • Version 6.7-670-201904214-ug
  • Version 6.7-670-201904215
  • Version 6.7-670-201904215-ug
  • Version 6.7-670-201904216
  • Version 6.7-670-201904216-ug
  • Version 6.7-670-201904217
  • Version 6.7-670-201904217-ug
  • Version 6.7-670-201904218
  • Version 6.7-670-201904218-ug
  • Version 6.7-670-201904219
  • Version 6.7-670-201904219-ug
  • Version 6.7-670-201904220
  • Version 6.7-670-201904220-ug
  • Version 6.7-670-201904221
  • Version 6.7-670-201904221-ug
  • Version 6.7-670-201904222
  • Version 6.7-670-201904222-ug
  • Version 6.7-670-201904223
  • Version 6.7-670-201904223-ug
  • Version 6.7-670-201904224
  • Version 6.7-670-201904224-ug
  • Version 6.7-670-201904225
  • Version 6.7-670-201904225-ug
  • Version 6.7-670-201904226
  • Version 6.7-670-201904226-ug
  • Version 6.7-670-201904227
  • Version 6.7-670-201904227-ug
  • Version 6.7-670-201904228
  • Version 6.7-670-201904228-ug
  • Version 6.7-670-201904229
  • Version 6.7-670-201904229-ug
  • Version 6.7-670-201905001
  • Version 6.7-670-201906002
  • Version 6.7-670-201908101
  • Version 6.7-670-201908102
  • Version 6.7-670-201908103
  • Version 6.7-670-201908104
  • Version 6.7-670-201908201
  • Version 6.7-670-201908202
  • Version 6.7-670-201908203
  • Version 6.7-670-201908204
  • Version 6.7-670-201908205
  • Version 6.7-670-201908206
  • Version 6.7-670-201908207
  • Version 6.7-670-201908208
  • Version 6.7-670-201908209
  • Version 6.7-670-201908210
  • Version 6.7-670-201908211
  • Version 6.7-670-201908212
  • Version 6.7-670-201908213
  • Version 6.7-670-201908214
  • Version 6.7-670-201908215
  • Version 6.7-670-201908216
  • Version 6.7-670-201908217
  • Version 6.7-670-201908218
  • Version 6.7-670-201908219
  • Version 6.7-670-201908220
  • Version 6.7-670-201908221
  • Version 6.7-670-201911001
  • Version 6.7-670-201912001
  • Version 6.7-670-201912101
  • Version 6.7-670-201912102
  • Version 6.7-670-201912401
  • Version 6.7-670-201912402
  • Version 6.7-670-201912403
  • Version 6.7-670-201912404
  • Version 6.7-670-201912405
  • Version 6.7-670-202004001
  • Version 6.7-670-202004002
  • Version 6.7-670-202004301
  • Version 6.7-670-202004401
  • Version 6.7-670-202004402
  • Version 6.7-670-202004403
  • Version 6.7-670-202004404
  • Version 6.7-670-202004405
  • Version 6.7-670-202004406
  • Version 6.7-670-202004407
  • Version 6.7-670-202004408
  • Version 6.7-670-202006001
  • Version 6.7-670-202008001
  • Version 6.7-670-202010001
  • Version 6.7-670-202011001
  • Version 6.7-670-202011002
  • Version 6.7-670-202102001
  • Version 6.7-670-202103001
  • Version 7.0-beta
  • Version 7.0-update_1a
  • Version 7.0-update_1b
  • Version 7.0-update_1c
  • Version 7.0
  • Version 7.0-update_1
  • Version 7.0-update_1d

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-21994
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-21994