VMware Releases Security Update

Security update addresses one vulnerability affecting VMware Tools

Threat ID:: CC-4155
Threat Severity:: Information only
Published:: 25 August 2022 3:44 PM

Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Security update addresses one vulnerability affecting VMware Tools

Affected platforms

The following platforms are known to be affected:

Versions: 12.x.y, 11.x.y for Windows, 12.x.y, 11.x.y, 10.x.y for Linux

VMware Tools

Threat details

Introduction

VMware has released a security update to address one vulnerability in VMware Tools. The vulnerability tracked as CVE-2022-31676 is related to local privilege escalation and has a score of 7.2 on the CVSSv3 scale.

An attacker with local non-administrative access to the Guest OS can escalate privileges as a root user and take control of an affected system.

Remediation advice

Affected organisations are encouraged to review VMware Security Advisory VMSA-2022-0024 and apply the relevant updates.

Definitive source of threat updates

https://www.vmware.com/security/advisories/VMSA-2022-0024.html

CVE Vulnerabilities

Status Published

CVE-2022-31676

VMware Tools (12.0.0, 11.x.y and 10.x.y) contains a local privilege escalation vulnerability. A malicious actor with local non-administrative access to the Guest OS can escalate privileges as a root user in the virtual machine.

Last edited: 25 August 2022 3:45 pm