SECURELIST
Virtualization security: attack layers and misconfiguration impact
MEDIUM virtualization ESXi Proxmox ransomware
Strategic summary
The key insight is that virtualization security depends heavily on identity and monitoring hygiene, and compromised monitoring access can expose the ESXi administration plane.
Relevance for you
In the cases described, attacks on virtual environments do not run through hypervisor vulnerabilities but through weak access controls and reused root credentials in monitoring and automation tooling.
Risk score
Review required 5
- cvss base
- 0.00
- kev bonus
- 0.00
- epss bonus
- 0.00
- poc bonus
- 15.00
- raw before weight
- 15.00
- industry weight
- 1.10
- freshness factor
- 0.80
- exploitability factor
- 1.00
- days old
- 4.00
- vendor mismatch penalty
- 0.00
- consensus penalty
- -8.00
Path: operational
Consensus check
The pipeline self-checks before delivery. These rules lowered the score:
-
VENDOR_MISMATCHVendor not found in alert title −5 -
TTP_SKIPPEDTTP mapping skipped (placeholder or aggregation article) −3
- Consensus penalty:
- −8.0
- Total penalty:
- −8.0