CVE-2022-22943: High severity open vm tools vulnerability

Q: What is CVE-2022-22943?

CVE-2022-22943 is a vulnerability in VMware Tools for Windows that allows a malicious actor with local administrative privileges to execute code with system privileges.

Q: How does CVE-2022-22943 impact VMware Tools for Windows?

CVE-2022-22943 allows an attacker to execute code with system privileges in the Windows guest OS where VMware Tools is installed.

Q: Which versions of VMware Tools for Windows are affected by CVE-2022-22943?

VMware Tools for Windows versions 11.x.y and 10.x.y prior to 12.0.0 are affected by CVE-2022-22943.

Q: What is the severity of CVE-2022-22943?

CVE-2022-22943 has a severity rating of 6.7 (out of 10), indicating a high severity.

Q: How can I fix CVE-2022-22943?

To fix CVE-2022-22943, update VMware Tools for Windows to version 12.0.0 or later.

Published Mar 3, 2022

Updated

VMware Tools for Windows (11.x.y and 10.x.y prior to 12.0.0) contains an uncontrolled search path vulnerability. A malicious actor with local administrative privileges in the Windows guest OS, where VMware Tools is installed, may be able to execute code with system privileges in the Windows guest OS due to an uncontrolled search path element.

Affected Software

1 affected component

vmware tools>=10.0.0<12.0.0

Event History

Mar 3, 2022

CVE Published

via MITRE·09:59 PM

Data Sourced

via MITRE·09:59 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2022-22943?

CVE-2022-22943 is a vulnerability in VMware Tools for Windows that allows a malicious actor with local administrative privileges to execute code with system privileges.

How does CVE-2022-22943 impact VMware Tools for Windows?

CVE-2022-22943 allows an attacker to execute code with system privileges in the Windows guest OS where VMware Tools is installed.

Which versions of VMware Tools for Windows are affected by CVE-2022-22943?