CVE-2020-3950: VMware Multiple Products Privilege Escalation Vulnerability

Description

VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for Mac (5.x and prior before 5.4.0) contain a privilege escalation vulnerability due to improper use of setuid binaries. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to root on the system where Fusion, VMRC or Horizon Client is installed.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack vector

Local

Complexity

Low

Privileges

Low

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)7.3% · higher than 94% of CVEs

Exploited in the wildYes

CISA KEVListed Nov 3, 2021

Federal remediation dueMay 3, 2022

Ransomware campaign useNot known

Affected products

Which versions

VF

VMware Fusion, VMware Remote Console for Mac and Horizon Client for Mac ·

VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for Mac (5.x and prior before 5.4.0) · source: vendor

FU

Fusion · Vmware

11.0.0 before 11.5.2 · source: NVD

HC

Horizon Client · Vmware

5.0.0 before 5.4.0 · source: NVD

RC

Remote Console · Vmware

11.0.0 before 11.0.1 · source: NVD

MP

Multiple Products · VMware

All versions, or not specified · source: KEV