Description
SFCB (Small Footprint CIM Broker) as used in ESXi has an authentication bypass vulnerability. A malicious actor with network access to port 5989 on ESXi may exploit this issue to bypass SFCB authentication by sending a specially crafted request.
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | VMware ESXi and VMware Cloud Foundation | affected |
|
Configuration 1 [-]
|
Configuration 2 [-]
|
No data.
No data available yet.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2021-9165 | SFCB (Small Footprint CIM Broker) as used in ESXi has an authentication bypass vulnerability. A malicious actor with network access to port 5989 on ESXi may exploit this issue to bypass SFCB authentication by sending a specially crafted request. |
References
History
Fri, 31 Oct 2025 11:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:* |
MITRE
Status: PUBLISHED
Assigner: vmware
Published:
Updated: 2024-08-03T18:30:23.556Z
Reserved: 2021-01-04T00:00:00.000Z
Link: CVE-2021-21994
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-07-13T19:15:09.327
Modified: 2025-10-31T11:44:38.620
Link: CVE-2021-21994
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses