CVE-2023-20867

🗓️ 13 Jun 2023 16:47:21Reported by vmwareType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 965 Views

CVE-2023-20867: ESXi host compromise leads to VMware Tools failur

Reporter	Title	Published	Views	Family All 154
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Storage Defender – Data Protect	30 Aug 202317:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway Virtual Edition vulnerable to security bypass due to open-vm-tools (CVE-2023-20867)	29 Jul 202421:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities	24 Oct 202319:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway Virtual Edition affected by bypass vulnerability in Open VM Tools	14 May 202415:03	–	ibm
ATTACKERKB	CVE-2023-20867	13 Jun 202300:00	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : open-vm-tools, open-vm-tools-desktop, open-vm-tools-devel (ALAS2023-2023-259)	20 Jul 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : open-vm-tools (ALAS-2023-2139)	20 Jul 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0076: open-vm-tools (ALINUX3-SA-2023:0076)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 9 : open-vm-tools-12.2.0-3.el9	29 Feb 202400:00	–	nessus
Tenable Nessus	CentOS 7 : open-vm-tools (RHSA-2023:3944)	28 Jul 202300:00	–	nessus

NVD

Node

vmware toolsRange10.3.0–12.2.5

Node

debian debian_linuxMatch10.0

debian debian_linuxMatch11.0

debian debian_linuxMatch12.0

Node

fedoraproject fedoraMatch37

fedoraproject fedoraMatch38

fedoraproject fedoraMatch39

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows",
      "Linux"
    ],
    "product": "VMware Tools",
    "vendor": "VMware",
    "versions": [
      {
        "status": "unaffected",
        "version": "12.2.5"
      }
    ]
  }
]

Source	Link
vmware	www.vmware.com/security/advisories/VMSA-2023-0013.html
openwall	www.openwall.com/lists/oss-security/2023/10/16/2
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/ZJM6HDRQYS74JA7YNKQBFH2XSZ52HEWH/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/TJNJMD67QIT6LXLKWSHFM47DCLRSMT6W/
openwall	www.openwall.com/lists/oss-security/2023/10/16/11
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/NVKQ6Y2JFJRWPFOZUOTFO3H27BK5GGOG/
debian	www.debian.org/security/2023/dsa-5493
security	www.security.netapp.com/advisory/ntap-20230725-0001/
lists	www.lists.debian.org/debian-lts-announce/2023/08/msg00020.html
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

28 Oct 2025 13:46Current

5.1Medium risk

Vulners AI Score5.1

CVSS 3.13.9

EPSS0.13638

SSVC