VMware Products Remote Code Execution Vulnerability

Last Update Date: 22 Oct 2018 09:16 Release Date: 22 Oct 2018 5106 Views

RISK: Medium Risk

TYPE: Operating Systems - VM Ware

A vulnerability was identified in VMware Products. A remote attacker could exploit this vulnerability to trigger remote code execution on the targeted system.

Impact

Remote Code Execution

System / Technologies affected

VMware Workstation Pro / Player (Workstation)
VMware vSphere ESXi (ESXi)
VMware Fusion Pro, Fusion (Fusion)

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix: https://www.vmware.com/security/advisories/VMSA-2018-0026.html

Vulnerability Identifier

CVE-2018-6974

Source

AusCERT
VMware