PT-2022-6136 · Vmware · Vmware Tools For Windows+1

Sergey Kornienko + 1 · Published 2022-11-29 · Updated 2025-10-29 · CVE-2022-31693

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions VMware Tools for Windows versions 10.x.y through 12.1.4 VMware Tools for Windows versions 11.x.y

Description The issue is related to insufficient input validation in the VM3DMP driver of VMware Tools for Windows, which can lead to a denial-of-service condition. A malicious actor with local user privileges in the Windows guest OS can trigger a PANIC in the VM3DMP driver, causing the denial-of-service condition.

Recommendations For versions 10.x.y through 12.1.4, update to version 12.1.5 or later. For versions 11.x.y, update to version 12.1.5 or later. As a temporary workaround, consider disabling the VM3DMP driver until a patch is available.

Fix

DoS

Improper Resource Release

RCE

Weakness Enumeration

CWE-404

CWE-20

Related Identifiers

BDU:2023-00152

CVE-2022-31693

Affected Products

Vmware Tools

Vmware Tools For Windows

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2022-31693 · Security Note
• https://vmware.com/security/advisories/VMSA-2022-0029.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-00152 · Security Note
• https://osv.dev/vulnerability/CVE-2022-31693 · Vendor Advisory
• https://t.me/cvenotify/106610 · Telegram Post
• https://security.netapp.com/advisory/ntap-20221223-0009 · Note
• https://t.me/cveNotify/140802 · Telegram Post
• https://t.me/cvenotify/52722 · Telegram Post
• https://security.netapp.com/advisory/ntap-20230824-0009 · Note
• https://altsp.su/obnovleniya-bezopasnosti · Note