8.3
CVSSv2

CVE-2012-1515

Published: 02/04/2012 Updated: 12/10/2018
CVSS v2 Base Score: 8.3 | Impact Score: 10 | Exploitability Score: 6.5
VMScore: 739
Vector: AV:A/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

VMware ESXi 3.5, 4.0, and 4.1 and ESX 3.5, 4.0, and 4.1 do not properly implement port-based I/O operations, which allows guest OS users to gain guest OS privileges by overwriting memory locations in a read-only memory block associated with the Virtual DOS Machine.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

vmware esxi 4.0

vmware esxi 4.1

vmware esxi 3.5

vmware esx 4.0

vmware esx 4.1

vmware esx 3.5

Exploits

VMware suffers from a backdoor ROM overwrite privilege escalation vulnerability ...