Rewterz Threat Advisory – Multiple Microsoft Azure Site Recovery Vulnerabilities

Rewterz Threat Advisory – CVE-2022-22983 – VMware Workstation for Windows Vulnerability

August 10, 2022

Rewterz Threat Advisory – CVE-2022-26373 – VMware ESXi Vulnerability

Severity

Medium

Analysis Summary

CVE-2022-26373

VMware ESXi could allow a local authenticated attacker to obtain sensitive information, caused by a return-stack-buffer-underflow in the Intel and AMD processors that it utilizes. An attacker could exploit this vulnerability to exploit various side-channel CPU flaws, obtain sensitive information from physical memory about the hypervisor or other virtual machines that reside on the same ESXi host, and use this information to launch further attacks against the affected system.

Impact

Information Disclosure

Indicators Of Compromise

CVE

CVE-2022-26373

Affected Vendors

VMware

Affected Products

VMware ESXi 6.5
VMware ESXi 6.7
VMware ESXi 7.0

Remediation

Refer to VMware Security Advisory for patch, upgrade or suggested workaround information.

VMware Security Advisory

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.

Request a demo