VMware Aria Operations for Logs RCE (CVE-2023-34051)

[jheysel-r7]

Summary

At first glance this looked appetizing however:

While this attack may seem simple – it does come with some challenges. It relies on the attacker having compromised an existing host in the environment and has the sufficient permissions add an additional static IP to an existing interface or add an additional interface

:(

Basic example

POC