PT-2026-7289 · Vmware+1 · Vmware Esxi+1

CVE-2025-25058

·

Publicado

2026-02-10

·

Atualizado

2026-02-10

CVSS v3.1

3.3

Baixa

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions VMware ESXi versions prior to 2.2.2.0 (ESXi 8.0) VMware ESXi versions prior to 2.2.3.0 (ESXi 9.0)
Description An improper initialization issue exists in some ESXi kernel mode driver for the Intel Ethernet 800-Series. This may allow an information disclosure. A local, unprivileged software adversary with an authenticated user and a low complexity attack may enable data exposure. The potential vulnerability may impact the confidentiality of the vulnerable system.
Recommendations Update VMware ESXi to version 2.2.2.0 or later for ESXi 8.0. Update VMware ESXi to version 2.2.3.0 or later for ESXi 9.0.

Correção

Improper Initialization

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-665

Identificadores relacionados

BDU:2026-01835
CVE-2025-25058

Produtos afetados

Intel 800 Series Ethernet
Vmware Esxi