Rockwell Automation Lifecycle Services with VMware
Successful exploitation of these vulnerabilities could allow an attacker with local administrative privileges to execute code.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-22226US | medium6.0OT kritisch | KEV | ||
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a vir… | ||||
| CVE-2025-22225US | high8.2OT kritisch | KEV | ||
VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the sa… | ||||
| CVE-2025-22224US | high8.2OT kritisch | KEV | ||
VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-25-077-02 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-25-077-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (15)
- MitigationEndpoint Protection Service with RA Proxy & VMware only
Additionally, users using the affected software, who are not able to upgrade to one of the corrected versions, are encouraged to apply security best practices, where possible.
- MitigationEndpoint Protection Service with RA Proxy & VMware only
Additionally, users using the affected software, who are not able to upgrade to one of the corrected versions, are encouraged to apply security best practices, where possible.
- MitigationEndpoint Protection Service with RA Proxy & VMware only
Additionally, users using the affected software, who are not able to upgrade to one of the corrected versions, are encouraged to apply security best practices, where possible.
- MitigationEngineered and Integrated Solutions with VMware
Additionally, users using the affected software, who are not able to upgrade to one of the corrected versions, are encouraged to apply security best practices, where possible.
- MitigationEngineered and Integrated Solutions with VMware
Additionally, users using the affected software, who are not able to upgrade to one of the corrected versions, are encouraged to apply security best practices, where possible.
- MitigationEngineered and Integrated Solutions with VMware
Additionally, users using the affected software, who are not able to upgrade to one of the corrected versions, are encouraged to apply security best practices, where possible.
- MitigationIndustrial Data Center (IDC) with VMware
Additionally, users using the affected software, who are not able to upgrade to one of the corrected versions, are encouraged to apply security best practices, where possible.
- MitigationIndustrial Data Center (IDC) with VMware
Additionally, users using the affected software, who are not able to upgrade to one of the corrected versions, are encouraged to apply security best practices, where possible.
- MitigationIndustrial Data Center (IDC) with VMware
Additionally, users using the affected software, who are not able to upgrade to one of the corrected versions, are encouraged to apply security best practices, where possible.
- MitigationThreat Detection Managed Services (TDMS) with VMware
Additionally, users using the affected software, who are not able to upgrade to one of the corrected versions, are encouraged to apply security best practices, where possible.
- MitigationThreat Detection Managed Services (TDMS) with VMware
Additionally, users using the affected software, who are not able to upgrade to one of the corrected versions, are encouraged to apply security best practices, where possible.
- MitigationThreat Detection Managed Services (TDMS) with VMware
Additionally, users using the affected software, who are not able to upgrade to one of the corrected versions, are encouraged to apply security best practices, where possible.
- MitigationVersaVirtual Appliance (VVA) with VMware
Additionally, users using the affected software, who are not able to upgrade to one of the corrected versions, are encouraged to apply security best practices, where possible.
- MitigationVersaVirtual Appliance (VVA) with VMware
Additionally, users using the affected software, who are not able to upgrade to one of the corrected versions, are encouraged to apply security best practices, where possible.
- MitigationVersaVirtual Appliance (VVA) with VMware
Additionally, users using the affected software, who are not able to upgrade to one of the corrected versions, are encouraged to apply security best practices, where possible.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan