CVE-2020-3941 - The repair operation of VMware Tools for Windows 10.x.y has a race condition which may allow for privilege escalation in the Virtual Machine where Tools is installed

Back Back to CVE browser

HIGH

The repair operation of VMware Tools for Windows 10.x.y has a race condition which may allow for privilege escalation in the Virtual Machine where Tools is installed

Published Jan 15, 2020

7.0

HIGH

CVSS 3.1

EPSS 0.31%

Description

The repair operation of VMware Tools for Windows 10.x.y has a race condition which may allow for privilege escalation in the Virtual Machine where Tools is installed. This vulnerability is not present in VMware Tools 11.x.y since the affected functionality is not present in VMware Tools 11.

Affected products

Vendor VMware Product VMware Tools for Windows (VMware Tools) Default
n/a
- Version
  VMware Tools for Windows 10.x.y
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

VMware

VMware Tools for Windows (VMware Tools)

n/a

Version	Status	Constraints
VMware Tools for Windows 10.x.y	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-362

Race Condition

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25206
Advisory
https://www.vmware.com/security/advisories/VMSA-2020-0002.html
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-25206		Advisory
https://www.vmware.com/security/advisories/VMSA-2020-0002.html		x_refsource_CONFIRMVendor Advisory