VMware Tools Authentication Bypass Vulnerability

LOW 3.9EXPLOITED (CISA KEV)CVE-2023-20867 · Published 13/06/2023 · updated 17/06/2026

VMware Tools Authentication Bypass Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 23/06/2023. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
tools vmware	`≥ 10.3.0, < 12.2.5`	`12.2.5`

Description

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.

References

openwall.com/lists/oss-security/2023/10/16/11 · Mailing List
openwall.com/lists/oss-security/2023/10/16/2 · Mailing List
lists.debian.org/debian-lts-announce/2023/08/msg00020.html · Mailing List
lists.fedoraproject.org/archives/list/[email protected]/message/NVKQ6Y2JFJRWPFOZUOTFO3H27BK5GGOG · Mailing List
lists.fedoraproject.org/archives/list/[email protected]/message/TJNJMD67QIT6LXLKWSHFM47DCLRSMT6W · Mailing List
lists.fedoraproject.org/archives/list/[email protected]/message/ZJM6HDRQYS74JA7YNKQBFH2XSZ52HEWH · Mailing List
security.netapp.com/advisory/ntap-20230725-0001 · Third Party Advisory
debian.org/security/2023/dsa-5493 · Mailing List
vmware.com/security/advisories/VMSA-2023-0013.html · Patch
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2023-20867

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free