CVE-2020-3950

Warnung

Exploit

EPSS 19.65%
Veröffentlicht 17.03.2020 19:15:12
Zuletzt bearbeitet 30.10.2025 20:07:39
Quelle security@vmware.com
CVE-Watchlists
Login
Unerledigt
Login

VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for Mac (5.x and prior before 5.4.0) contain a privilege escalation vulnerability due to improper use of setuid binaries. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to root on the system where Fusion, VMRC or Horizon Client is installed.

Betroffene Produkte Warnungen 1 Metriken 4 CWE 1 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

VMware ≫ Fusion Version >= 11.0.0 < 11.5.2

Apple ≫ macOS Version-

VMware ≫ Horizon Client Version >= 5.0.0 < 5.4.0

Apple ≫ macOS Version-

VMware ≫ Remote Console Version >= 11.0.0 < 11.0.1

Apple ≫ macOS Version-

03.11.2021: CISA Known Exploited Vulnerabilities (KEV) Catalog

VMware Multiple Products Privilege Escalation Vulnerability

Schwachstelle

VMware Fusion, Remote Console (VMRC) for Mac, and Horizon Client for Mac contain a privilege escalation vulnerability due to improper use of setuid binaries that allows attackers to escalate privileges to root.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	19.65%	0.952

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C
134c704f-9b21-4f2e-91b3-4a467353bcc0	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H