Multiple vulnerabilities were identified in VMware products, a remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, remote code execution, disclose sensitive information and bypass security restriction on the targeted system.
The following systems/applications are affected:
- VMware ESXi version 6.5, 6.7 and 7.0
- VMware NSX-T version 2.5.x, 3.x
- VMware Workstation version 15.x, 16.x
- VMware Fusion version 11.x, 12.x
- VMware Cloud Foundation version 3.x and 4.x
- vCenter Server version 6.5, 6.7 and 7.0
VMware have release a fix for the affected system/technologies. For more details, please refer to: https://www.vmware.com/security/advisories/VMSA-2020-0023.html
Matsco Solutions are currently testing the fix to ensure there are no issues with it and will be reaching out to clients running VMware to schedule updates to their environments