vSphere Replication, a VMware vSphere component, is a virtual machine replication engine designed for data protection and disaster recovery.
VMware has told customers that several versions of the product are affected by a high-severity (important) command injection vulnerability that can be exploited by a hacker with admin privileges to execute shell commands on the underlying system.
“Successful exploitation of this issue may allow authenticated admin user to perform a remote code execution,” VMware said in its advisory.