Vulnerabilitycritical

VMware Issues Patches for Critical Flaws Affecting Carbon Black App Control

The Hacker Newsby @TheHackersNewsMar 24, 2022 · 03:38 UTC (Mar 24, 2022)1 min read2

Read at thehackernews.com

Analyze CVE-2022-22951 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-22951 CVE-2022-22952

Tags: cve-2022-22951 cve-2022-22952 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-22951 +1 related CVE CVE-2022-22952	VMware Carbon Black App Control (8.5.x prior to 8.5.14, 8.6.x prior to 8.6.6, 8.7.x prior to 8.7.4 and 8.8.x prior to 8.8.2) contains an OS command injection…	9.1	20%		Mar 23, 2022

From the original article

1 min read at thehackernews.com

VMware on Wednesday released software updates to plug two critical security vulnerabilities affecting its Carbon Black App Control platform that could be abused by a malicious actor to execute arbitrary code on affected installations in Windows systems. Tracked as CVE-2022-22951 and CVE-2022-22952 , both the flaws are rated 9. 1 out of a maximum of 10 on the CVSS vulnerability scoring system.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.