Local Privilege Escalation Vulnerability in VMware Tools and Console

CVE-2021-21999

Summary

VMware Tools for Windows, VMware Remote Console for Windows, and VMware App Volumes are susceptible to a local privilege escalation vulnerability. An attacker with standard access to a virtual machine can exploit this issue by placing a specially crafted file named 'openssl.cnf' in an unrestricted directory. This exploitation allows for the execution of malicious code with elevated privileges, posing a significant risk for users if not addressed promptly.

References