CVE-2021-22045

💻 Affected Systems

📦 What is this software?

⚠️ Risk & Real-World Impact

🎯 Exploit Status

Exploitation requires access to a virtual machine and typically needs to be chained with other vulnerabilities for full impact. Public proof-of-concept exists.

🔍 How to Verify

Check ESXi version with: esxcli system version get. For Workstation/Fusion: Check Help > About.

esxcli system version get

Verify patch is installed: esxcli software vib list | grep ESXi670-202111101-SG or ESXi650-202110101-SG

📡 Detection & Monitoring

source="vmware" AND ("CD-ROM" OR "cdrom") AND ("overflow" OR "crash" OR "exception")

🔗 References

• http://packetstormsecurity.com/files/165440/VMware-Security-Advisory-2022-0001.html Third Party Advisory,VDB Entry
• https://www.vmware.com/security/advisories/VMSA-2022-0001.html Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-22-003/ Third Party Advisory,VDB Entry
• http://packetstormsecurity.com/files/165440/VMware-Security-Advisory-2022-0001.html Third Party Advisory,VDB Entry
• https://www.vmware.com/security/advisories/VMSA-2022-0001.html Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-22-003/ Third Party Advisory,VDB Entry