CVE-2010-4573: VMware ESXi

High severity, CVSS 9.3. EPSS: 2.5% chance of exploitation in the next 30 days.

The Update Installer in VMware ESXi 4.1, when a modified sfcb.cfg is present, does not properly configure the SFCB authentication mode, which allows remote attackers to obtain access via an arbitrary username and password.

Affected products

• VMware ESXi: version 4.1 only

Published 2010-12-22. Last modified 2026-06-16.