VMware Cloud Community
ksanjeebkumar
Contributor
Contributor

Disable-CIMSLP

Hi Team ,

Last 23/FEB , Vmware has released a CVE to update across VMware iNfra - https://kb.vmware.com/s/article/76372

 

I Would like to execute a command from PowerCLI to set the Following value on all ESXI in Passthrough way . PLease suggest if any script for

  1. Stop the SLP service on the ESXi host with this command:
/etc/init.d/slpd stop
 
 
Note: The SLP service can only be stopped when the service is not in use. Use the following command to view the operational state of Service Location Protocol Daemon:

esxcli system slp stats get
 

  1. Run the following command to disable the SLP service:
esxcli network firewall ruleset set -r CIMSLP -e 0
 
To make this change persist across reboots:

chkconfig slpd off

To check if the change is applied across reboots:

chkconfig --list | grep slpd

output: slpd off

Recently we are trying to achieve the 2nd statement esxcli network firewall ruleset set -r CIMSLP -e 0 with following command however it fails .

(Get-VMHost | Get-EsxCli).network.firewall.ruleset.set($false,$false,"CIMSLP")

Moderator edit by wila: Moved to PowerCLI discussions

0 Kudos
1 Reply
LucD
Leadership
Leadership

There is already a thread on this subject in this community.
See PowerCLI - Workaround for OpenSLP security vulnera... - VMware Technology Network VMTN


Blog: lucd.info  Twitter: @LucD22  Co-author PowerCLI Reference

0 Kudos