CVE-2020-3950: VMware Multiple Products Privilege Escalation Vulnerability

Vulnerability summary

CVE-2020-3950 is a high (CVSS 7.8) Improper Privilege Management vulnerability in VMware Multiple Products. It is known to be exploited: CISA lists it, first on 03-11-2021. EPSS estimates a 7.25% chance of exploitation in the next 30 days, higher than 94.2% of scored vulnerabilities. 5 public exploits are recorded.

Timeline

1. 17-03-2020
   PublishedVulnerability first disclosed.
2. 03-11-2021
   Added to CISA KEVVMware Multiple Products Privilege Escalation Vulnerability
3. 03-05-2022
   CISA remediation dueApply updates per vendor instructions.
4. 21-10-2025
   Last modifiedVulnerability information updated.

Description

VMware Fusion (11.x before 11.5.2), VMware Remote Console for Mac (11.x and prior before 11.0.1) and Horizon Client for Mac (5.x and prior before 5.4.0) contain a privilege escalation vulnerability due to improper use of setuid binaries. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to root on the system where Fusion, VMRC or Horizon Client is installed.

• CWE-269Improper Privilege ManagementThe product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.