'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>
 
   
 

vul_app: vmware_vcenter_server_rce_vul（Rule ID：1070210181）

Release Date：2025/9/15

Rule Name：CVE-2021-21985: VMware vCenter Server Remote Code Execution Vulnerability

Severity：critical

CVE ID：CVE-2021-21985

 

Descripiton：

Vmware vSphere Client is an application software of the American company Vmware. Provide virtualization management. The vSphere Client has a security vulnerability. The vulnerability is due to the lack of input validation of the virtual SAN health check plugin enabled by default in vCenter Server, which allows attackers to execute commands with unrestricted permissions on the underlying operating system. This rule supports to defend the A6: Vulnerable and Outdated Components of OWASP Top 10 - 2021.
Other reference：None

 

Solution：

Update vendor patches.