Detections
Analytics

VMware NSX for vSphere (NSX-v) < 6.4.14 Multiple Vulnerabilities (VMSA-2022-0027)

critical Nessus Plugin ID 166697

Language:

Synopsis

A virtualization management application installed on the remote host is affected by multiple vulnerabilities.

Description

The version of VMware NSX for vSphere (NSX-V) installed on the remote host is prior to 6.4.14. It is, therefore, affected by multiple vulnerabilities, including:

 - VMware Cloud Foundation contains a remote code execution vulnerability via XStream open source library.
 (CVE-2021-39144)
- VMware Cloud Foundation contains an XML External Entity (XXE) vulnerability. (CVE-2022-31678)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. Nessus has also not tested for the presence of a workaround.

Solution

Upgrade to VMware NSX for vSphere (NSX-V) 6.4.14 or later.

See Also

https://www.vmware.com/security/advisories/VMSA-2022-0027.html

https://kb.vmware.com/s/article/89809

Plugin Details

Severity: Critical

ID: 166697

File Name: vmware_nsx_for_vsphere_6_4_14.nasl

Version: 1.7

Type: remote

Family: Misc.

Published: 10/28/2022

Updated: 3/10/2023

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Critical

Score: 9.9

CVSS v2

Risk Factor: Medium

Base Score: 6

Temporal Score: 5.2

Vector: CVSS2#AV:N/AC:M/Au:S/C:P/I:P/A:P

CVSS Score Source: CVE-2021-39144

CVSS v3

Risk Factor: Critical

Base Score: 9.1

Temporal Score: 8.7

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C

CVSS Score Source: CVE-2022-31678

Vulnerability Information

CPE: x-cpe:/h:vmware:nsx-v, x-cpe:/h:vmware:nsx_for_vsphere

Required KB Items: installed_sw/VMware NSX for vSphere (NSX-v)

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 10/25/2022

Vulnerability Publication Date: 10/25/2022

CISA Known Exploited Vulnerability Due Dates: 3/31/2023

Exploitable With

Core Impact

Metasploit (VMware NSX Manager XStream unauthenticated RCE)

Reference Information

CVE: CVE-2021-39144, CVE-2022-31678

IAVA: 2022-A-0445