The CIMHttpServer firewall ruleset, which is for internal port 5988, might remain active even when you stop the CIM service.
vSphere ESXi
This issue is resolved in this release ESXi 8.0 Update 3. The CIMHttpServer firewall ruleset is permanently deactivated