Vulnerability Details CVE-2017-4945
VMware Workstation (14.x and 12.x) and Fusion (10.x and 8.x) contain a guest access control vulnerability. This issue may allow program execution via Unity on locked Windows VMs. VMware Tools must be updated to 10.2.0 for each VM to resolve CVE-2017-4945. VMware Tools 10.2.0 is consumed by Workstation 14.1.0 and Fusion 10.1.0 by default.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 19.8%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 2.1
Products affected by CVE-2017-4945
-
cpe:2.3:a:vmware:fusion:10.0
-
cpe:2.3:a:vmware:fusion:10.0.1
-
cpe:2.3:a:vmware:fusion:10.1.0
-
cpe:2.3:a:vmware:fusion:10.1.1
-
cpe:2.3:a:vmware:fusion:8.0
-
cpe:2.3:a:vmware:fusion:8.0.1
-
cpe:2.3:a:vmware:fusion:8.0.2
-
cpe:2.3:a:vmware:fusion:8.1
-
cpe:2.3:a:vmware:fusion:8.1.1
-
cpe:2.3:a:vmware:fusion:8.5
-
cpe:2.3:a:vmware:fusion:8.5.1
-
cpe:2.3:a:vmware:fusion:8.5.10
-
cpe:2.3:a:vmware:fusion:8.5.2
-
cpe:2.3:a:vmware:fusion:8.5.3
-
cpe:2.3:a:vmware:fusion:8.5.4
-
cpe:2.3:a:vmware:fusion:8.5.5
-
cpe:2.3:a:vmware:fusion:8.5.6
-
cpe:2.3:a:vmware:fusion:8.5.7
-
cpe:2.3:a:vmware:fusion:8.5.8
-
cpe:2.3:a:vmware:fusion:8.5.9
-
cpe:2.3:a:vmware:workstation:12.0.0
-
cpe:2.3:a:vmware:workstation:12.0.1
-
cpe:2.3:a:vmware:workstation:12.1
-
cpe:2.3:a:vmware:workstation:12.1.1
-
cpe:2.3:a:vmware:workstation:12.5
-
cpe:2.3:a:vmware:workstation:12.5.0
-
cpe:2.3:a:vmware:workstation:12.5.1
-
cpe:2.3:a:vmware:workstation:12.5.2
-
cpe:2.3:a:vmware:workstation:12.5.3
-
cpe:2.3:a:vmware:workstation:12.5.4
-
cpe:2.3:a:vmware:workstation:12.5.5
-
cpe:2.3:a:vmware:workstation:12.5.6
-
cpe:2.3:a:vmware:workstation:12.5.7
-
cpe:2.3:a:vmware:workstation:12.5.8
-
cpe:2.3:a:vmware:workstation:12.5.9
-
cpe:2.3:a:vmware:workstation:14.0
-
cpe:2.3:o:apple:mac_os_x:-