CVE-2014-1207: VMware Esx

Medium severity, CVSS 4.3. EPSS: 2.8% chance of exploitation in the next 30 days.

VMware ESXi 4.0 through 5.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (NULL pointer dereference) by intercepting and modifying Network File Copy (NFC) traffic.

Affected products

• VMware Esx: version 4.0 only; version 4.1 only
• VMware ESXi: version 4.0 only; version 4.1 only; version 5.0 only; version 5.1 only

Published 2014-01-17. Last modified 2026-06-17.