VMware ESXi Storage Controllers Vulnerable to Out-of-Bounds Read/Write Attacks
CVE-2024-22273
8.1HIGH
Key Information
- Vendor
- VMware
- Status
- Vmware Esxi
- Vmware Workstation
- Vmware Fusion
- Vmware Cloud Foundation (esxi)
- Vendor
- CVE Published:
- 21 May 2024
Summary
The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious actor with access to a virtual machine with storage controllers enabled may exploit this issue to create a denial of service condition or execute code on the hypervisor from a virtual machine in conjunction with other issues.
Affected Version(s)
VMware ESXi < 8.0
VMware ESXi < 7.0
VMware Workstation < 17.5.1
CVSS V3.1
Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed
Timeline
Vulnerability published.
Vulnerability Reserved.
Collectors
NVD DatabaseMitre Database