VMware experienced critical flaws in their ESXi and vCenter products, which were heavily exploited by ransomware gangs and state actors, causing considerable disruptions. The vulnerabilities, such as CVE-2024-38812, CVE-2024-37085, and CVE-2024-38813, highlighted shortcomings in Broadcom's security responses, with incomplete patching and delays in acknowledgment. This allowed attackers to capitalize on these exploits, leading to ransomware infections and data breaches that potentially compromised personal and financial information, causing significant operational and security challenges for the company and its clients.
Source: https://www.theregister.com/2025/02/28/cisa_kev_list_ransomware/
"id": "vmw403030325",
"linkid": "vmware",
"type": "Ransomware",
"date": "2/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"