Lucene search

[email protected]CVE-2022-31676

HistoryAug 23, 2022 - 8:15 p.m.

CVE-2022-31676

2022-08-2320:15:08

CWE-269

[email protected]

web.nvd.nist.gov

913

vmware tools

cve-2022-31676

local privilege escalation

nvd

security vulnerability

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.8

Confidence

High

EPSS

Percentile

5.1%

JSON

VMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege escalation vulnerability. A malicious actor with local non-administrative access to the Guest OS can escalate privileges as a root user in the virtual machine.

Affected configurations

NVD

Node

vmwaretoolsRange10.0.0–12.1.0

AND

microsoftwindowsMatch-

Node

vmwaretoolsRange10.0.0–10.3.25

vmwaretoolsRange11.0.0–12.1.0

AND

linuxlinux_kernelMatch-

Node

debiandebian_linuxMatch10.0

debiandebian_linuxMatch11.0

Node

fedoraprojectfedoraMatch36

fedoraprojectfedoraMatch37

Node

netappontap_select_deploy_administration_utilityMatch-

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "VMware Tools",
    "versions": [
      {
        "version": "VMware Tools (12.0.0, 11.x.y and 10.x.y)",
        "status": "affected"
      }
    ]
  }
]