{"id":7298,"date":"2025-09-30T10:03:53","date_gmt":"2025-09-30T10:03:53","guid":{"rendered":"https:\/\/serisec.com\/index.php\/2025\/09\/30\/vmware-tools-and-aria-operations-vulnerabilities-let-attackers-escalate-privileges-to-root\/"},"modified":"2025-09-30T10:03:53","modified_gmt":"2025-09-30T10:03:53","slug":"vmware-tools-and-aria-operations-vulnerabilities-let-attackers-escalate-privileges-to-root","status":"publish","type":"post","link":"https:\/\/serisec.com\/index.php\/2025\/09\/30\/vmware-tools-and-aria-operations-vulnerabilities-let-attackers-escalate-privileges-to-root\/","title":{"rendered":"VMware Tools and Aria Operations Vulnerabilities Let Attackers Escalate Privileges to Root"},"content":{"rendered":"

VMware Tools and Aria Operations Vulnerabilities Let Attackers Escalate Privileges to Root
\n \t

\n
<\/BR>
\n
\n \t

\n
<\/BR><\/p>\n

\n

VMware has released an advisory to address three high-severity vulnerabilities in VMware Aria Operations, VMware Tools<\/a>, VMware Cloud Foundation, VMware Telco Cloud Platform, and VMware Telco Cloud Infrastructure.\u00a0<\/p>\n

Disclosed on 29 September 2025, the advisory covers CVE-2025-41244, CVE-2025-41245, and CVE-2025-41246 with CVSSv3 base scores ranging from 4.9 to 7.8.\u00a0<\/p>\n

Administrators must apply the patched versions immediately to prevent local privilege escalation<\/a>, information disclosure, and improper authorization exploits.<\/p>\n

Local Privilege Escalation Flaw (CVE-2025-41244)<\/strong><\/h2>\n

CVE-2025-41244 is a local privilege escalation vulnerability impacting VMware Aria Operations (all 8.x versions), VMware Tools (12.x, 13.x), and VMware Cloud Foundation Operations.\u00a0<\/p>\n

A malicious local actor with non-administrative privileges on a VM with VMware Tools installed and managed by Aria Operations (SDMP enabled) can exploit this flaw to escalate privileges to root.\u00a0<\/p>\n

Broadcom assigned a CVSSv3 base score of 7.8 (AV:L\/AC:L\/PR:L\/UI:N\/S:U\/C:H\/I:H\/A:H). Resolution requires upgrading to:<\/p>\n

\n
\"VMware<\/figure>\n<\/div>\n

Fixed versions include Aria Operations 8.18.5, VMware Tools 13.0.5.0 and 12.5.4, and Cloud Foundation Operations 9.0.1.0. No workarounds are available.<\/p>\n

Information Disclosure and Improper Authorization Flaws<\/strong><\/h2>\n

CVE-2025-41245 introduces an information disclosure vulnerability in VMware Aria Operations.<\/a>\u00a0<\/p>\n

An attacker with non-administrative Aria Operations access can disclose other users\u2019 credentials. This flaw carries a CVSSv3 score of 4.9 (AV:N\/AC:L\/PR:H\/UI:N\/S:U\/C:H\/I:N\/A:N).\u00a0<\/p>\n

Administrators should upgrade Aria Operations to 8.18.5 or apply the KB92148 patch for earlier Cloud Foundation versions. CVE-2025-41246 is an improper authorization vulnerability in VMware Tools for Windows (all 12.x and 13.x releases).\u00a0<\/p>\n

A malicious user already authenticated via vCenter or ESX could pivot to other guest VMs if they know the target VM credentials. Its CVSSv3 score is 7.6 (AV:A\/AC:H\/PR:H\/UI:N\/S:C\/C:H\/I:H\/A:H).\u00a0<\/p>\n

Remediation requires updating VMware Tools for Windows to 13.0.5 or 12.5.4.<\/p>\n

\n\n\n\n\n\n\n
CVE ID<\/strong><\/td>\nTitle<\/strong><\/td>\nCVSSv3.1 Score<\/strong><\/td>\nSeverity<\/strong><\/td>\n<\/tr>\n
CVE-2025-41244<\/td>\nLocal privilege escalation<\/td>\n7.8<\/td>\nImportant<\/td>\n<\/tr>\n
CVE-2025-41245<\/td>\nInformation disclosure<\/td>\n4.9<\/td>\nImportant<\/td>\n<\/tr>\n
CVE-2025-41246<\/td>\nImproper authorization<\/td>\n7.6<\/td>\nImportant<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/figure>\n

Broadcom credits Maxime Thiebaut (NVISO), Sven Nobis and Lorin Lehawany (ERNW), and Tom J\u00f8ran S\u00f8nstebyseter R\u00f8nning (@L1v1ng0ffTh3L4N) for reporting these issues.<\/p>\n

No workarounds exist for any of these vulnerabilities. All affected environments should implement the patches immediately issued by<\/a> Broadcom.\u00a0<\/p>\n

Administrators without patching capability can temporarily restrict local VM user privileges and limit access to Aria Operations consoles.<\/p>\n

Follow us on Google News<\/a>, LinkedIn<\/a>, and X<\/a> for daily cybersecurity updates. Contact us<\/a> to feature your stories.<\/strong><\/p>\n

The post VMware Tools and Aria Operations Vulnerabilities Let Attackers Escalate Privileges to Root<\/a> appeared first on Cyber Security News<\/a>.<\/p>\n<\/div>\n

\t

\n
<\/BR>
\n Florence Nightingale
\n \t

\n
<\/BR>
\nGo to cyber-security-news<\/a>
\n \t

\n
<\/BR><\/p>\n","protected":false},"excerpt":{"rendered":"

VMware Tools and Aria Operations Vulnerabilities Let Attackers Escalate Privileges to Root VMware has released an advisory to address three high-severity vulnerabilities in VMware Aria Operations, VMware Tools, VMware Cloud Foundation, VMware Telco Cloud Platform, and VMware Telco Cloud Infrastructure.\u00a0 Disclosed on 29 September 2025, the advisory covers CVE-2025-41244, CVE-2025-41245, and CVE-2025-41246 with CVSSv3 base […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[129,63,131,648],"tags":[130],"class_list":["post-7298","post","type-post","status-publish","format-standard","hentry","category-cyber-security","category-cyber-security-news","category-vulnerability","category-vulnerability-news","tag-cyber-security-news"],"_links":{"self":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/7298"}],"collection":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/comments?post=7298"}],"version-history":[{"count":0,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/7298\/revisions"}],"wp:attachment":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/media?parent=7298"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/categories?post=7298"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/tags?post=7298"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}