What is CVE-2022-22943?

CVE-2022-22943 is a medium-severity vulnerability in VMware Tools, classified under Uncontrolled Search Path Element. CVSS score: 6.7/10. Published 2022-03-03.

How severe is CVE-2022-22943?

Medium severity. CVSS v3 base score is 6.7 out of 10.

Vulnerability in VMware Tools

CVE-2022-22943

VMware Tools for Windows (11.x.y and 10.x.y prior to 12.0.0) contains an uncontrolled search path vulnerability. A malicious actor with local administrative privileges in the Windows guest OS, where VMware Tools is installed, may be able to execute code with system privileges in the Windows guest OS due to an uncontrolled search path element.

EPSS: 0.013 (67.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Vmware Tools
N/a Vmware Tools For Windows — versions VMware Tools for Windows (11.x.y and 10.x.y prior to 12.0.0)

Weakness classification (CWE)

CWE-427 — Uncontrolled Search Path Element

References

security@vmware.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2022-22943?: CVE-2022-22943 is a medium-severity vulnerability in VMware Tools, classified under Uncontrolled Search Path Element. CVSS score: 6.7/10. Published 2022-03-03.
How severe is CVE-2022-22943?: Medium severity. CVSS v3 base score is 6.7 out of 10.