SFCB (Small Footprint CIM Broker) as used in ESXi has an authentication bypass vulnerability. A malicious actor with network access to port 5989 on ESXi may exploit this issue to bypass SFCB authentication by sending a specially crafted request.
History

Fri, 31 Oct 2025 11:45:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*

cve-icon MITRE

Status: PUBLISHED

Assigner: vmware

Published: 2021-07-13T18:05:43

Updated: 2024-08-03T18:30:23.556Z

Reserved: 2021-01-04T00:00:00

Link: CVE-2021-21994

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2021-07-13T19:15:09.327

Modified: 2025-10-31T11:44:38.620

Link: CVE-2021-21994

cve-icon Redhat

No data.