⚠ Actively exploited
Added to CISA KEV on 2023-06-23. Federal agencies required to patch by 2023-07-14. Required action: Apply updates per vendor instructions..

CVE-2023-20867

CWE-287 — Improper Authentication11 documents10 sources
Severity
3.9LOW
EPSS
2.7%
top 14.07%
CISA KEV
KEV
Added 2023-06-23
Due 2023-07-14
Exploit
Exploited in wild
Active exploitation observed
Affected products
3
Vmware ToolsDebian Debian LinuxFedoraproject Fedora
Timeline
PublishedJun 13
KEV addedJun 23
KEV dueJul 14
Latest updateJul 27
CISA Required Action: Apply updates per vendor instructions.

Description

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:NExploitability: 0.8 | Impact: 2.7

Affected Packages3 packages

▶NVDvmware/tools10.3.0 — 12.2.5
▶Debianopen-vm-tools< 2:11.2.5-2+deb11u2+3
▶Ubuntuopen-vm-tools< 2:11.3.0-2ubuntu0~ubuntu20.04.5+3

Also affects: Debian Linux 10.0, 11.0, 12.0, Fedora 37, 38, 39

Patches

Patch: www.openwall.com ↗Patch: www.openwall.com ↗Patch: www.vmware.com ↗

🔴Vulnerability Details

5
OSV
open-vm-tools vulnerability↗2023-07-27
▶
CVEList
VMware Tools Authentication Bypass Vulnerability↗2023-06-13
▶
GHSA
GHSA-qm59-f7vh-3m2p: A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of↗2023-06-13
▶
OSV
CVE-2023-20867: A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of↗2023-06-13
▶
VulnCheck
VMware Tools Authentication Bypass Vulnerability↗2023
▶

📋Vendor Advisories

5
Ubuntu
Open VM Tools vulnerability↗2023-07-27
▶
CISA
VMware Tools Authentication Bypass Vulnerability↗2023-06-23
▶
VMware
VMware Tools update addresses Authentication Bypass vulnerability (CVE-2023-20867)↗2023-06-13
▶
Red Hat
open-vm-tools: authentication bypass vulnerability in the vgauth module↗2023-06-13
▶
Debian
CVE-2023-20867: open-vm-tools - A fully compromised ESXi host can force VMware Tools to fail to authenticate hos...↗2023
▶
CVE-2023-20867 (LOW CVSS 3.9) | A fully compromised ESXi host can f | cvebase.io