If your business is still running VMware infrastructure, the latest VMware news around remote code execution (RCE) vulnerability in vCenter Server should be more than a security concern. It's a reminder that staying with VMware isn't just risky, it's expensive.

Earlier this month, CISA (the U.S. Cybersecurity and Infrastructure Security Agency) added CVE-2024-37079 to its Known Exploited Vulnerabilities Catalog. This flaw allows attackers to execute code remotely on unpatched VMware vCenter Servers, with no user interaction and no credentials required. Once exploited, it can give them full control over the virtual environment.

But this blog isn't about the vulnerability alone. It's about what it represents: rising risk and rising costs, both of which are avoidable.

Why We Walked Away from VMware

We made the decision to move away from VMware not because of a single security issue, but because of what VMware has become: a high-cost, high-complexity platform with decreasing flexibility.

After Broadcom's acquisition of VMware, we saw significant changes to licensing models, bundling practices, and pricing transparency. Many long-time customers were suddenly paying far more for the same capabilities, with fewer options and more uncertainty.

From our perspective as a managed service provider, that math no longer worked, for us or for the businesses we support.

Security Adds Another Layer of Cost

Here's what business leaders need to know: vulnerabilities like the one disclosed this month don't just pose a technical threat. They add real-world operational costs:

  • Emergency patching and remediation

  • Business disruption if services go down

  • Compliance risks and potential penalties

  • Ransomware recovery, should attackers gain access

And when these vulnerabilities hit core infrastructure, the systems that host everything else, the potential cost is even higher.

You Have Options

The good news is you don't have to stay on this path. In our recent webinar, we laid out practical, tested alternatives to VMware that deliver the performance and reliability businesses need without the escalating price tag.

▶ Watch: VMware Alternatives & Migration Strategies for 2024

In the session, we covered:

  • Why VMware's pricing model is unsustainable for many organizations

  • How to evaluate Hyper-V, Proxmox, and other cost-effective options

  • What a smart, phased migration strategy looks like

  • Real-world examples of successful transitions away from VMware

Whether you're a growing business looking to control infrastructure spend, or an IT leader under pressure to improve ROI, there's never been a better time to reassess your platform decisions.

What to Do Next

If you're still on VMware, take these steps now:

  1. Patch immediately if you're running an affected version of vCenter. This latest vulnerability is already being exploited in the wild.

  2. Assess your true cost of ownership. That includes licensing, maintenance, emergency response, and recovery costs.

  3. Start evaluating alternatives. Don't wait for the next vulnerability or price increase. The technology is ready, and so are we.

You don't need to overpay for virtualization. You don't need to scramble every time a critical security flaw is discovered. And you don't need to stay locked into a platform that puts pressure on your bottom line.

We've helped organizations like yours take back control of their infrastructure strategy, without unnecessary complexity, cost, or risk.

If you're ready to have that conversation, we're here!