CVE-2023-20854: High severity vmware workstation and esxi vulnerability

Published Feb 3, 2023

Updated

VMware Workstation contains an arbitrary file deletion vulnerability. A malicious actor with local user privileges on the victim's machine may exploit this vulnerability to delete arbitrary files from the file system of the machine on which Workstation is installed.

Affected Software

4 affected components

VMware Workstation=17.0

Microsoft Windows

All of the following

VMware Workstation=17.0

Microsoft Windows

Remediation

Patch Available

https://www.vmware.com/security/advisories/VMSA-2023-0003.html

Event History

Feb 3, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Data Sourced

via NVD·07:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2023-20854?

CVE-2023-20854 is an arbitrary file deletion vulnerability in VMware Workstation.

How does CVE-2023-20854 affect VMware Workstation?

CVE-2023-20854 allows a malicious actor with local user privileges to delete arbitrary files from the file system of the machine on which VMware Workstation is installed.

What is the severity of CVE-2023-20854?

The severity of CVE-2023-20854 is high with a CVSS score of 8.4.

How can I fix CVE-2023-20854?

To fix CVE-2023-20854, it is recommended to update VMware Workstation to the latest version as per the advisory provided by VMware.

Where can I find more information about CVE-2023-20854?

You can find more information about CVE-2023-20854 in the advisory published by VMware at the following link: <a href='https://www.vmware.com/security/advisories/VMSA-2023-0003.html'>https://www.vmware.com/security/advisories/VMSA-2023-0003.html</a>