On Tuesday, May 25, 2021, VMware published security advisory VMSA-2021-0010, which includes details on CVE-2021-21985, a critical remote code execution vulnerability in the vSphere Client (HTML5) component of vCenter Server (6.5, 6.7, and 7.0) and VMware Cloud Foundation (3.x and 4.x). The vulnerability arises from lack of input validation in the Virtual SAN Health Check plug-in, which is enabled by default in vCenter Server. Successful exploitation requires network access to port 443 and allows attackers to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server. CVE-2021-21985 carries a CVSSv3 base score of 9.8. While there are no reports of exploitation in the wild as of May 26, 2021, defenders may remember that CVE-2021-21972, another critical vCenter Server vulnerability from earlier this year, saw widespread exploitation within a few days of disclosure. It is likely that this latest severe flaw will follow suit, and we strongly recommend patching on an…

To maintain a constant connection between a host and its storage, ESXi supports multipathing. With multipathing, you can use more than one physical path that transfers data between the host and an external storage device.

Backtrace of PSOD will be similar to this: @BlueScreen: PANIC bora/vmkernel/main/dlmalloc.c:4908 - Corruption in dlmalloc   Backtrace for Current CPU - 3:     0

The following messages are observed in /var/log/vmkernel.log2020-11-12T17:12:51.647Z cpu39:2865450)qlnativefc: vmhba2(82:0.0): Process error entry. type/count/s

Enhancement for KB High frequency of read operations on VMware Tools image may cause SD card corruption

Physical firewall is in-between vCenter and ESXi hosts Hosts consistently disconnecting and re-connecting in the inventory of vCenter. (At consistent intervals)