vSphere

Use the referenced Nmap NSE check and Horizon3.ai proof of concept to assess CVE-2021-21972, a remote code execution vulnerability in a vSphere Client (HTML5) plugin on affected vCenter Server releases. A network-reachable HTTPS service on port 443 is required; the vulnerable plugin is present in default installations. The Python proof of concept can check vulnerability benignly with --target alone; it uploads a supplied file only if that check reports vulnerable and --file, --path, and --operating-system are also supplied. Whether the file executes depends on the file, path, and target platform.