

Rewterz Threat Alert – APT Targeting/ Compromise of Government Agencies, Critical Infrastructure, and Private Sector Organizations
December 18, 2020
Rewterz Threat Advisory – CVE-2020-27254 – ICS: Emerson Rosemount X-STREAM
December 18, 2020
Rewterz Threat Alert – APT Targeting/ Compromise of Government Agencies, Critical Infrastructure, and Private Sector Organizations
December 18, 2020
Rewterz Threat Advisory – CVE-2020-27254 – ICS: Emerson Rosemount X-STREAM
December 18, 2020Severity
Low
Analysis Summary
VMware ESXi, Workstation and Fusion contain a denial of service vulnerability due to improper input validation in GuestInfo.A malicious actor with normal user privilege access to a virtual machine can crash the virtual machine’s vmx process leading to a denial of service condition.
Impact
Denial of service
Affected Vendors
VMware
Affected Products
- VMware ESXi
- VMware Workstation
- VMware Fusion
- VMware Cloud Foundation
Remediation
Refer to VMware advisory for the complete list of affected products and their respective patches.
https://www.vmware.com/security/advisories/VMSA-2020-0029.html