VMware vCenter Server 7.0 < 7.0U3o / 8.0 < 8.0U2 Partial Information Disclosure (VMSA-2023-0023)

The version of VMware vCenter Server installed on the remote host is 7.0 prior to 7.0U3o, or 8.0 prior to 8.0U2. It is, therefore, affected by a partial information disclosure vulnerability as referenced in the VMSA-2023-0023 advisory: - vCenter Server contains a partial information disclosure...

VMware Workstation 17.0.x < 17.5 Information Disclosure (VMSA-2023-0022)

VMware Workstation 17.x prior to 17.5 contains an out-of-bounds read vulnerability that exists in the functionality for sharing host Bluetooth devices with the virtual machine. A malicious actor with local administrative privileges on a virtual machine may be able to read privileged information...

Exploit for Incorrect Authorization in Vmware Aria_Operations_For_Logs

CVE-2023-34051 CVE-2023-34051 is an authentication bypass tha...

KLA61502 OSI vulnerability in VMWare Workstation

Information disclosure vulnerability was found in VMWare Workstation. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories VMSA-2023-0022 Related products VMware-Workstation CVE list CVE-2023-34044 high Solution Update to the latest version Download...

VMware Aria Operations < 8.6 Hot Fix 11 / 8.10 Hot Fix 9 / 8.12 Hot Fix 5 Privilege Escalation (VMSA-2023-0020)

The version of VMware Aria Operations formerly vRealize Operations running on the remote host is 8.6.x prior to 8.6 Hot Fix 11, 8.10.x prior to 8.10 Hot Fix 9 or 8.12.x prior to 8.12 Hot Fix 5. It is, therefore, affected by a privilege escalation vulnerability. An attacker with administrative...

VMware Aria Operations for Networks default SSH key

Added: 09/06/2023 Background SSH Private keys are used for authentication for many devices. Devices shipped with a default, static key are vulnerable to compromise if the public discovers the key. The private key can be re-used by an attacker to gain remote, privileged access to the device. Probl...

VMware Aria Operations for Networks default SSH key

Added: 09/06/2023 Background SSH Private keys are used for authentication for many devices. Devices shipped with a default, static key are vulnerable to compromise if the public discovers the key. The private key can be re-used by an attacker to gain remote, privileged access to the device. Probl...

VMware Tools 10.3.x / 11.x / 12.x < 12.2.5 Authentication Bypass (VMSA-2023-0013)

The version of VMware Tools installed on the remote Windows host is affected by an authentication bypass vulnerability in the vgauth module. A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the...

VMware vRealize Operations Multiple Vulnerabilities (VMSA-2023-0009)

The version of VMware vRealize Operations vROps running on the remote host is missing a vendor supplied patch. It is, therefore, affected by multiple vulnerabilities: - VMware Aria Operations contains a privilege escalation vulnerability. An authenticated malicious user with ReadOnly privileges c...

KLA49049 Multiple vulnerabilities in VMware Workstation

Multiple vulnerabilities were found in VMware Workstation. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Information disclosure vulnerability in bluetooth device-sharing functionality can ...

VMware Carbon Black App Control 8.7 < 8.7.8 / 8.8 < 8.8.6 / 8.9 < 8.9.4 Injection (VMSA-2023-0004)

VMware Carbon Black App Control management server is affected by an injection vulnerability. A malicious actor with privileged access to the App Control administration console may be able to use specially crafted input allowing access to the underlying server operating system. Note that Nessus ha...

VMware ESXi OpenSLP heap overflow

Added: 02/10/2023 Background VMware ESXi is a bare metal hypervisor. Problem A heap overflow vulnerability in the OpenSLP service could allow an attacker on the same network segment to execute arbitrary commands. Resolution Upgrade to a fixed version referenced in VMSA-2021-0002 or disable the SL...

VMware Workstation 17.0.x < 17.0.1 Vulnerability (VMSA-2023-0003)

The version of VMware Workstation installed on the remote Windows host is 17.0.x prior to 17.0.1. It is, therefore, affected by a vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

KLA20212 DoS vulnerability in VMware Workstation

Arbitrary file deletion vulnerability was found in VMWare Workstation. Malicious users can exploit this vulnerability to cause denial of service, bypass security restrictions. Original advisories VMSA-2023-0003 Related products VMware-Workstation CVE list CVE-2023-20854 critical Solution Update t...

VMware Workstation 16.0.x < 16.2.5 Vulnerability (VMSA-2022-0033)

The version of VMware Workstation installed on the remote host is 16.0.x prior to 16.2.5. It is, therefore, affected by a vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable,...

VMware Cloud Foundation XStream Deserialization

Added: 10/31/2022 Background VMware Cloud Foundation is a hybrid cloud platform. Problem An XStream deserialization vulnerability in the NSM Manager component of VMware Cloud Foundation NSX-V allows a remote attacker to execute arbitrary commands. Resolution Apply the patch referenced in...

VMware Cloud Foundation XStream Deserialization

Added: 10/31/2022 Background VMware Cloud Foundation is a hybrid cloud platform. Problem An XStream deserialization vulnerability in the NSM Manager component of VMware Cloud Foundation NSX-V allows a remote attacker to execute arbitrary commands. Resolution Apply the patch referenced in...

VMware vCenter Server 6.5 < 6.5 U3u RCE (VMSA-2022-0025)

The version of VMware vCenter Server installed on the remote host is 6.5 prior to 6.5 U3u. It is, therefore, affected by a remote code execution vulnerability due to unsafe deserialization. A remote attacker with admin privileges on the affected server can exploit this vulnerability to execute...

VMware Tools 11.x / 12.x < 12.1.0 Privilege Escalation (VMSA-2022-0024)

The version of VMware Tools installed on the remote Windows host is affected by a privilege escalation vulnerability. A malicious actor with local non-administrative access to the Guest OS can escalate privileges as a root user in the virtual machine. Note that Nessus has not tested for this issu...

VMware Releases Security Update

VMware has released a security update to address a vulnerability in Tools. A remote attacker could likely exploit the vulnerability to take control of an affected system. CISA encourages users and administrators to review VMware Security Advisory VMSA-2022-0024 and apply the necessary update. Thi...