CVE-2020-3950: VMware Multiple Products Privilege Escalation Vulnerability
VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for Mac (5.x and prior before 5.4.0) contain a privilege escalation vulnerability due to improper use of setuid binaries. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to root on the system where Fusion, VMRC or Horizon Client is installed.
Other sources
VMware Fusion, Remote Console (VMRC) for Mac, and Horizon Client for Mac contain a privilege escalation vulnerability due to improper use of setuid binaries that allows attackers to escalate privileges to root.
— CISA
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
VMware Fusionto a version that resolves this vulnerability.Fixed in 11.5.2 - Upgrade
Upgrade
VMware Remote Console for Mac (VMRC)to a version that resolves this vulnerability.Fixed in 11.0.1 - Upgrade
Upgrade
Horizon Client for Macto a version that resolves this vulnerability.Fixed in 5.4.0
Event History
Frequently Asked Questions
What is CVE-2020-3950?
CVE-2020-3950 is a privilege escalation vulnerability affecting VMware Fusion, VMware Remote Console for Mac, and Horizon Client for Mac.
Which products are affected by CVE-2020-3950?
CVE-2020-3950 affects VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1), and Horizon Client for Mac (5.x and prior before 5.4.0).
What is the severity of CVE-2020-3950?
CVE-2020-3950 has a severity rating of 7.8 (High).
How can CVE-2020-3950 be exploited?
CVE-2020-3950 can be exploited by attackers with local system access to escalate their privileges due to improper use of setuid binaries.
Are Apple macOS systems vulnerable to CVE-2020-3950?
No, Apple macOS systems are not vulnerable to CVE-2020-3950.