VMWare privilege escalation

It's possible to manipulate emulated ROM via backdoor interface...