CVE-2022-38652

CVE-2022-38652 is a critical remote insecure deserialization vulnerability affecting VMWare Hyperic Agent 5.8.6. An authenticated attacker can exploit this to execute arbitrary code or malware on the agent and its host operating system with the privileges of the Hyperic Agent process, often SYSTEM on Windows. This vulnerability carries a CVSS score of 9.9 (Critical) due to its network attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While no public exploit intelligence or active exploitation is reported, and community discussion is minimal, it's important to note that this vulnerability affects an unsupported product and requires prior authentication, which could be gained via CVE-2022-38650.