CVE-2017-4945

Severity: medium (CVSS 5.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-01-05 · updated 2026-06-17

Description

VMware Workstation (14.x and 12.x) and Fusion (10.x and 8.x) contain a guest access control vulnerability. This issue may allow program execution via Unity on locked Windows VMs. VMware Tools must be updated to 10.2.0 for each VM to resolve CVE-2017-4945. VMware Tools 10.2.0 is consumed by Workstation 14.1.0 and Fusion 10.1.0 by default.

Affected products

VMware Fusion: 8.0, 8.0.1, 8.0.2, 8.1, 8.1.1, 8.5 (+14)
VMware Workstation: 12.0.0, 12.0.1, 12.1, 12.1.1, 12.5, 12.5.0 (+10)
VMware Fusion: 10.x, 8.x
VMware Workstation: 14.x, 12.x

References

http://www.securityfocus.com/bid/102441
http://www.securitytracker.com/id/1040109
http://www.securitytracker.com/id/1040136
https://www.vmware.com/us/security/advisories/VMSA-2018-0003.html
http://www.securityfocus.com/bid/102441
http://www.securitytracker.com/id/1040109
http://www.securitytracker.com/id/1040136
https://www.vmware.com/us/security/advisories/VMSA-2018-0003.html

Get alerted when CVE-2017-4945 or the next vulnerability affects your stack