VMware has released a security update to address a vulnerability in vSphere Replication. An attacker could exploit this vulnerability to take control of an affected system. vSphere Replication updates address a command injection vulnerability (CVE-2021-21976). VMware has evaluated this issue with a CVSSv3 base score of 7.2.

For more information on vulnerability and update, please review the VMware Security Advisory - VMSA-2021-0001.