CVE-2014-1207

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-01-17 · updated 2026-06-17

Description

VMware ESXi 4.0 through 5.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (NULL pointer dereference) by intercepting and modifying Network File Copy (NFC) traffic.

Affected products

VMware ESX: 4.0, 4.1 (and their updates)
VMware ESXi: 4.0-1, 4.0-2, 4.0-3, 4.0-4, 4.1-1, 4.1-2 (+2); 4.0, 4.1, 5.0, 5.1 (and their updates)

References

http://osvdb.org/102196
http://secunia.com/advisories/56499
http://www.securityfocus.com/bid/64995
http://www.securitytracker.com/id/1029643
http://www.vmware.com/security/advisories/VMSA-2014-0001.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/90559
http://osvdb.org/102196
http://secunia.com/advisories/56499
http://www.securityfocus.com/bid/64995
http://www.securitytracker.com/id/1029643
http://www.vmware.com/security/advisories/VMSA-2014-0001.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/90559

Get alerted when CVE-2014-1207 or the next vulnerability affects your stack