CISA Adds One Known Exploited Vulnerability to Catalog

Summary:

The US Cybersecurity and Infrastructure Security Agency (CISA) has added a new vulnerability to its Known Exploited Vulnerabilities Catalog, specifically CVE-2023-34048, a VMware vCenter Server Out-of-Bounds Write Vulnerability, due to evidence of active exploitation. The vulnerability poses a significant risk to the federal enterprise and agencies are required to remediate it by due date. While the directive applies to Federal Civilian Executive Branch agencies, CISA recommends that all organizations prioritize timely remediation of catalog vulnerabilities as part of their vulnerability management practice to reduce exposure to cyberattacks.