Vulnerability to original ESXi ransomware campaign still elevated

Despite having a patch released two years ago, at least 18,581 VMware ESXi servers were found by Rapid7 researchers to still be vulnerable to CVE-2021-21974, which has been exploited in initial attacks that were part of the ESXiArgs ransomware campaign, reports The Record, a news site by cybersecurity firm Recorded Future.

attacks campaign cve cve-2021-21974 cybersecurity esxi esxiargs esxiargs ransomware esxi ransomware exploited future patch ransomware rapid7 recorded future reports researchers servers the record vmware vmware esxi vmware esxi servers vulnerability vulnerability management vulnerable