This article provides information on how to mitigate the CVE-2023-20867 vulnerability.

→ Applies to: VMware Tools (from 10.3.0 to 12.2.0 included)

Vulnerability description

A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest virtual machine.

SOURCES
NIST (https://nvd.nist.gov/vuln/detail/CVE-2023-20867)
VMware (https://www.vmware.com/security/advisories/VMSA-2023-0013.html)

Solution

Update VMware Tools with a not affected version (12.2.5 and above).