CVE-2020-3950VMware Multiple Products Privilege Escalation Vulnerability
Known exploited — VMware Multiple Products Privilege Escalation Vulnerability
CISA confirmed this vulnerability is used in real attacks on 03.11.2021. Remediation deadline for US federal agencies: 03.05.2022.
Required action: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2020-3950
Description
VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for Mac (5.x and prior before 5.4.0) contain a privilege escalation vulnerability due to improper use of setuid binaries. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to root on the system where Fusion, VMRC or Horizon Client is installed.
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| — | VMware Fusion, VMware Remote Console for Mac and Horizon Client for Mac | VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for Mac (5.x and prior before 5.4.0) | |
| vmware | fusion | 11.0.0 – < 11.5.2 | |
| vmware | horizon client | 5.0.0 – < 5.4.0 | |
| vmware | remote console | 11.0.0 – < 11.0.1 |
References and patches
- https://www.vmware.com/security/advisories/VMSA-2020-0005.html Vendor Advisory
- http://packetstormsecurity.com/files/156843/VMware-Fusion-11.5.2-Privilege-Escalation.html ExploitThird Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/157079/VMware-Fusion-USB-Arbitrator-Setuid-Privilege-Escalation.html ExploitThird Party AdvisoryVDB Entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-3950 US Government Resource
CPE matches (NVD) (3)
cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*≥ 11.0.0 < 11.5.2cpe:2.3:a:vmware:horizon_client:*:*:*:*:*:*:*:*≥ 5.0.0 < 5.4.0cpe:2.3:a:vmware:remote_console:*:*:*:*:*:*:*:*≥ 11.0.0 < 11.0.1