Non gestisco server del genere, ma la prima cosa che leggo su esxi shell č questa: "ESXi Shell and SSH interfaces are disabled by default. Keep these interfaces disabled unless you are performing troubleshooting or support activities. For day-to-day activities, use the vSphere Client, where activity is subject to role-based access control and modern access control methods."

Quindi il problema principale non č tanto l'exploit quanto avere la shell aperta su internet.