CVE-2022-22943
First published: Thu Mar 03 2022(Updated: )
VMware Tools for Windows (11.x.y and 10.x.y prior to 12.0.0) contains an uncontrolled search path vulnerability. A malicious actor with local administrative privileges in the Windows guest OS, where VMware Tools is installed, may be able to execute code with system privileges in the Windows guest OS due to an uncontrolled search path element.
Credit: security@vmware.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| VMware Tools | >=10.0.0<12.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2022-22943?
CVE-2022-22943 is a vulnerability in VMware Tools for Windows that allows a malicious actor with local administrative privileges to execute code with system privileges.
How does CVE-2022-22943 impact VMware Tools for Windows?
CVE-2022-22943 allows an attacker to execute code with system privileges in the Windows guest OS where VMware Tools is installed.
Which versions of VMware Tools for Windows are affected by CVE-2022-22943?
VMware Tools for Windows versions 11.x.y and 10.x.y prior to 12.0.0 are affected by CVE-2022-22943.
What is the severity of CVE-2022-22943?
CVE-2022-22943 has a severity rating of 6.7 (out of 10), indicating a high severity.
How can I fix CVE-2022-22943?
To fix CVE-2022-22943, update VMware Tools for Windows to version 12.0.0 or later.
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/last-modified-date
- agent/type
- agent/description
- agent/first-publish-date
- agent/event
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/vmware
- canonical/vmware tools
- version/vmware tools/10.0.0