Rewterz

Rewterz Threat Advisory – CVE-2020-1647 – Juniper Junos OS Double free vulnerability

July 10, 2020
Rewterz

Rewterz Threat Alert – Powerful Conti Ransomware

July 10, 2020

Rewterz Threat Advisory – CVE-2020-3974 – VMware XPC Client validation privilege escalation vulnerability

Severity

High

Analysis Summary

VMware Fusion, VMRC for Mac and Horizon Client for Mac contain a privilege escalation vulnerability due to improper XPC Client validation.Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to root on the system where Fusion, VMRC for Mac or Horizon Client for Mac is installed.

Impact

Privilege escalation

Affected Vendors

VMware

Affected Products

  • VMware Fusion Pro / Fusion (Fusion)
  • VMware Remote Console for Mac (VMRC for Mac)
  • VMware Horizon Client for Mac

Remediation

Refer to Vmware advisory for the complete list of affected products and respective patches.

https://www.vmware.com/security/advisories/VMSA-2020-0017.html

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.