VMware Cloud Community
jcordova
Contributor
Contributor

Do you know if there is any update or patch for vsphere esxi 6.5 for this vulnerability?

NodeJS System Information Library Command Injection (CVE-2021-21315) for vSphere ESXi 6.5

Reply
0 Kudos
2 Replies
maksym007
Expert
Expert

Potentially there was a patch. But the question will be in downloading such. 

Officially you will not find it - I would suggest to open a ticket to VMware and asking them. 

Maybe they will provide you with a link 

scott28tt
VMware Employee
VMware Employee

Not according to this: https://www.vmware.com/security/advisories.html#search=CVE-2021-21315

Note that 6.5 is no longer a supported ESXi version, only 7.0 and later are.

-------------------------------------------------------------------------------------------------------------------------------------------------------------

Although I am a VMware employee I contribute to VMware Communities voluntarily (ie. not in any official capacity)
VMware Training & Certification blog