CISA Issues Emergency Directive and Releases Advisory Related to VMware Vulnerabilities

ronjor · May 18, 2022

Original release date: May 18, 2022

CISA has issued Emergency Directive (ED) 22-03 and released a Cybersecurity Advisory (CSA) in response to active and expected exploitation of multiple vulnerabilities in the following VMware products: VMware Workspace ONE Access (Access), VMware Identity Manager (vIDM), VMware vRealize Automation (vRA), VMware Cloud Foundation, vRealize Suite Lifecycle Manager.
Click to expand...

The CSA, AA22-138B: Threat Actors Chaining Unpatched VMware Vulnerabilities for Full System Control, provides indicators of compromise and detection signatures from CISA as well as trusted third parties to assist administrators with detecting and responding to active exploitation of CVE-2022-22954 and CVE-2022-22960.
Click to expand...

Malicious cyber actors were able to reverse engineer the vendor updates to develop an exploit within 48 hours and quickly began exploiting these disclosed vulnerabilities in unpatched devices. Based on this activity, CISA expects malicious cyber actors to quickly develop a capability to exploit CVE-2022-22972 and CVE-2022-22973, which were disclosed by VMware on May 18, 2022.
Click to expand...

Log in or Sign up

CISA Issues Emergency Directive and Releases Advisory Related to VMware Vulnerabilities

ronjor Global Moderator

Log in or Sign up

CISA Issues Emergency Directive and Releases Advisory Related to VMware Vulnerabilities

ronjor Global Moderator

Useful Searches