CVE-2025-22230

Published Mar 25, 2025

Last updated a year ago

CVSS high 7.8
Windows
VMware Tools

Overview

Description
VMware Tools for Windows contains an authentication bypass vulnerability due to improper access control. A malicious actor with non-administrative privileges on a guest VM may gain ability to perform certain high privilege operations within that VM.
Source
security@vmware.com
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
7.8
Impact score
5.9
Exploitability score
1.8
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity
HIGH

Weaknesses

security@vmware.com
CWE-288

Social media

Hype score
Not currently trending
  1. CVE-2025-22230: The 'Pipe Hijack' That Lets Any Guest User Take Over Your Entire Server Infrastructure. Read the full report on - https://t.co/Ucu7SasfRg https://t.co/bPyzr8KmEp

    @cyberbivash

    29 Dec 2025

    5 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  2. #exploit 1⃣. CVE-2025-20281: Cisco ISE API Unauthenticated RCE - https://t.co/bpaj1sWXKa 2⃣. CVE-2025-29017: Internet Banking System 2.0 RCE via Profile Picture Upload - https://t.co/4SzolqXLza 3⃣. CVE-2025-22230, CVE-2025-22247: The Guest Who Could - Exploiting LPE in VMW

    @ksg93rd

    28 Jul 2025

    326 Impressions

    1 Retweet

    2 Likes

    2 Bookmarks

    0 Replies

    0 Quotes

  3. برای ابزار VMware tools آسیب پذیری هایی با کدهای شناسایی CVE-2025-22230 و CVE-2025-22247 از نوع privilege escalation منتشر شده است. این آسیب پذیری باعث می شود که هر یوزری به یوزر system در

    @AmirHossein_sec

    27 Jul 2025

    47 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  4. Top 5 Trending CVEs: 1 - CVE-2021-27954 2 - CVE-2025-53770 3 - CVE-2025-23266 4 - CVE-2025-22230 5 - CVE-2025-32429 #cve #cvetrends #cveshield #cybersecurity https://t.co/4Fua3CAN6W

    @CVEShield

    27 Jul 2025

    13 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  5. 🚨 Two VMware Tools vulnerabilities (CVE-2025-22230 & 22247) allow SYSTEM-level access via VGAuth. Patch now or risk full compromise. Details 👉 https://t.co/m6VeqMRSpa #CyberSecurity #VMware #CVE202522230 #PatchNow #Canada #CanadaCyberAwareness https://t.co/ANT9wiLojw

    @FindSecCyber

    27 Jul 2025

    52 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

  6. 👑 Our researcher has discovered LPE in VMWare Tools (CVE-2025-22230 & CVE-2025-22247) via VGAuth! Write-up by the one who broke it: Sergey Bliznyuk https://t.co/kIYroVd8HQ

    @akaclandestine

    26 Jul 2025

    2723 Impressions

    9 Retweets

    40 Likes

    22 Bookmarks

    1 Reply

    0 Quotes

  7. CVE-2025-22230 & CVE-2025-22247 : LPE in VMWare Tools via VGAuth The Guest Who Could: Exploiting LPE in VMWare Tools https://t.co/vFTTkVST3g https://t.co/TGGiqwTppz

    @freedomhack101

    23 Jul 2025

    53 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

  8. 👑 Our researcher has discovered LPE in VMWare Tools (CVE-2025-22230 & CVE-2025-22247) via VGAuth! Write-up by the one who broke it: Sergey Bliznyuk (@justbronzebee) https://t.co/8IECtEVd44 https://t.co/SE5fOxx3b5

    @ptswarm

    22 Jul 2025

    5931 Impressions

    37 Retweets

    93 Likes

    31 Bookmarks

    0 Replies

    0 Quotes

  9. VMware Tools for Windows'ta bulunan CVE-2025-22230 açığı ciddi bir sorun. Saldırgan, düşük ayrıcalıklarla yüksek yetkili işlemler yapabiliyor ve bunu çözmek için yamalar hemen uygulanmalı gibi görünüyor.

    @adirabilisim

    16 May 2025

    22 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

  10. ⚠️ CVE-2025-22230 ⚠️ ‼️VMware Tools for Windows update addresses an authentication bypass vulnerability‼️ https://t.co/q8edCjSAfI https://t.co/3svPYC2GLc

    @HackingTeam777

    25 Apr 2025

    66 Impressions

    0 Retweets

    0 Likes

    1 Bookmark

    0 Replies

    0 Quotes

  11. Una vulnerabilidad crítica de autenticación (CVE-2025-22230) afecta a VMware Tools para Windows y permite a atacantes eludir controles de seguridad, poniendo en riesgo sistemas corporativos y de nube. 👇👇 𝗩𝗨𝗟𝗡𝗘𝗥𝗔𝗕𝗜𝗟𝗜𝗗𝗔𝗗 𝗖𝗥𝗜́𝗧𝗜𝗖𝗔 𝗘𝗡 𝗩𝗠𝗪𝗔𝗥𝗘 https://t.

    @C1B3R53CUR1TY

    18 Apr 2025

    34 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  12. 3. VMware Tools Güvenlik Açığı (CVE-2025-22230) Broadcom, Windows için VMware Tools’ta, düşük yetkili kullanıcıların sanal makinelerde yüksek ayrıcalıklı işlemler gerçekleştirmesine olanak tanıyan bir kimlik doğrulama atlama açığı tespit etti. Bu açık, sanal makine güvenliğini

    @MuratDemirtas

    12 Apr 2025

    41 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  13. Actively exploited CVE : CVE-2025-22230

    @transilienceai

    31 Mar 2025

    14 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    1 Reply

    0 Quotes

  14. Toca descargar la versión 12.5.1 de las VMware Tools debido al CVE-2025-22230: https://t.co/Ju1QR5mHvc #Ciberseguridad https://t.co/C1971Gr2Xv

    @manelrodero

    31 Mar 2025

    90 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

  15. Cybersecurity is not just IT's job; it’s a critical part of your legal strategy. Ignoring vulnerabilities like CVE-2025-22230 could expose sensitive data during your divorce. https://t.co/fqlHjqdbIw #DivorceLaw #ChicagoLaw #DigitalPrivacy #LegalPerspective

    @SteeleFamLaw

    30 Mar 2025

    5 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  16. Actively exploited CVE : CVE-2025-22230

    @transilienceai

    30 Mar 2025

    11 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    1 Reply

    0 Quotes

  17. Actively exploited CVE : CVE-2025-22230

    @transilienceai

    29 Mar 2025

    12 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    1 Reply

    0 Quotes

  18. 🚨 Critical Security Alert 🚨 A new authentication bypass vulnerability, CVE-2025-22230, has been discovered in Broadcom/VMware systems. This flaw could allow attackers to bypass authentication mechanisms, potentially exposing sensitive data and systems to unauthorized access.

    @Cybermazh

    28 Mar 2025

    54 Impressions

    2 Retweets

    3 Likes

    1 Bookmark

    0 Replies

    0 Quotes

  19. CVE-2025-22230 Vulnerability Improper Access Control: A Deep Dive https://t.co/aEk2TX0zIP https://t.co/qo1utWOa3T

    @huntingjacq

    27 Mar 2025

    25 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  20. 📰 Latest News: Authentication bypass CVE-2025-22230 impacts VMware Windows Tools More on: https://t.co/rRPTTREiMZ https://t.co/jPfKzPZv9K

    @StudiosClancy

    27 Mar 2025

    27 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  21. Windows版のVMware Tools に認証バイパスの脆弱性、対象者はアップデートを(CVE-2025-22230) #セキュリティ対策Lab #セキュリティ #Security https://t.co/2UY4P204DP

    @securityLab_jp

    27 Mar 2025

    69 Impressions

    1 Retweet

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

  22. 🚨 CVE-2025-22230 🔴 HIGH (7.8) 🏢 Unknown Vendor - VMware Tools 🏗️ 12.x.x, 11.x.x 🔗 https://t.co/s96fIduDUQ #CyberCron #VulnAlert #InfoSec https://t.co/HaYeJJRVOf

    @cybercronai

    26 Mar 2025

    32 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  23. VMware Tools for Windows Authentication Bypass Vulnerability: CVE-2025-22230 is an authentication bypass vulnerability in VMware Tools for Windows, resulting from improper access control mechanisms. #ThreatIntel #RedLeggCTI #VMware https://t.co/klWxA6JPWz

    @RedLegg

    26 Mar 2025

    7 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  24. Broadcom has addressed CVE-2025-22230, an authentication bypass vulnerability in #VMware Tools that could let attackers gain high-privilege access in Windows guest VMs. Organizations should patch immediately to prevent potential exploitation. More below: https://t.co/BqjS4azQoN

    @NetizenCorp

    26 Mar 2025

    22 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  25. #Authentication_bypass CVE-2025-22230 impacts #VMware #Windows Tools https://t.co/jvOJ2DPT46 https://t.co/hESoRU60bZ

    @omvapt

    26 Mar 2025

    44 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  26. CVE-2025-22230 : Authentication bypass in VMware Windows Tools VMware Tools is a suite of drivers and utilities designed to improve performance, graphics, and overall system integration for guest operating systems running in VMware virtual machines. https://t.co/QiH4wBTLaF

    @freedomhack101

    26 Mar 2025

    29 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

  27. Broadcom addressed a high-severity authentication bypass vulnerability (CVE-2025-22230, CVSS 9.8) in VMware Tools for Windows, allowing low-privileged attackers to escalate privileges. Affected versions include 12.x.x and 11.x.x. Exploitation in the wild is suspected but https://

    @gothburz

    26 Mar 2025

    126 Impressions

    0 Retweets

    2 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  28. BroadcomがVMware Windows Toolsにおける認証バイパスの脆弱性に警告(CVE-2025-22230) https://t.co/3sqKd8xV4y #Security #セキュリティ #ニュース

    @SecureShield_

    26 Mar 2025

    34 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  29. 👉 Broadcom has patched a high-severity #flaw in VMware Tools for Windows (CVE-2025-22230, CVSS 7.8) that allows non-admin users on a Windows guest VM to perform high-privilege operations due to improper access control 🤖 #vulnerability https://t.co/ILaZpSdqH6

    @manuelbissey

    26 Mar 2025

    20 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  30. Authentication bypass CVE-2025-22230 impacts VMware Windows Tools https://t.co/clJqHB6Y2n

    @hackplayers

    26 Mar 2025

    548 Impressions

    2 Retweets

    4 Likes

    1 Bookmark

    0 Replies

    0 Quotes

  31. 📌 تم اكتشاف ثغرات أمنية جديدة في VMware Tools وCrushFTP. قامت Broadcom بإصدار تصحيحات للثغرة شديدة الخطورة (CVE-2025-22230) في VMware Tools لنظام Windows، والتي قد تؤدي إلى تجاوز المصادقة، وتُقيَّم هذه الثغرة بـ 7.8 على مقياس CVSS من عشرة نقاط. #الامن_السيبراني https://t.co/OjM

    @Cybercachear

    26 Mar 2025

    3 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  32. 🚨Broadcom patches high-severity vulnerability (CVE-2025-22230) in VMware Tools for Windows; CrushFTP addresses unauthenticated HTTP(S) port access flaw in versions 10 & 11. No workarounds—update immediately! #CyberSecurity #VMware #CrushFTP https://t.co/YEEG28vZ19

    @syberintel

    26 Mar 2025

    62 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  33. 🚨 Broadcom just patched CVE-2025-22230, a 7.8 CVSS auth bypass in VMware Tools for Windows (v11.x.x & 12.x.x). No workaround. Fixed in v12.5.1—patch now. Also: CrushFTP v10 & v11 hit by unauth’d HTTP(S) access bug. Not actively exploited, but still dangerous. 🔗 Full d

    @TheHackersNews

    26 Mar 2025

    10960 Impressions

    37 Retweets

    61 Likes

    11 Bookmarks

    1 Reply

    0 Quotes

  34. Broadcomは、VMware Tools for Windows の認証回避の脆弱性(CVE-2025-22230)に対処するため、セキュリティアップデートを公開しました。攻撃者が一般ユーザー権限でWindows仮想マシンにログインしている状態でも、ユーザーの操作なしで管理者権限の操作が可能です。https://t.co/Jdumps74iD https://t.co/xTpptG802u

    @t_nihonmatsu

    26 Mar 2025

    304 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

  35. Broadcom has issued critical updates for VMware Tools on Windows to fix CVE-2025-22230, allowing local attackers to escalate privileges. Targeting continues amid rising ransomware threats. 🔒💻 #VMware #CVE2025 #USA link: https://t.co/zRKXTUMO4G https://t.co/oAJLppxXK3

    @TweetThreatNews

    25 Mar 2025

    22 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  36. 🚨 CVE-2025-22230 🔴 HIGH (7.8) 🏢 Unknown Vendor - VMware Tools 🏗️ 12.x.x, 11.x.x 🔗 https://t.co/s96fIduDUQ #CyberCron #VulnAlert #InfoSec https://t.co/tonj26xMgj

    @cybercronai

    25 Mar 2025

    41 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  37. CVE-2025-22230: Authentication Bypass Vulnerability in VMware Tools for Windows https://t.co/wrMI9xe0Dq

    @_cvereports

    25 Mar 2025

    4 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

  38. CVE-2025-22230 impacts VMware Tools #CVE-2025-22230 #VMware https://t.co/NZIyULqB1u

    @pravin_karthik

    25 Mar 2025

    41 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  39. VMwareは2025年3月、Windows版VMware Toolsに存在する認証回避の脆弱性(CVE-2025-22230)に対し、緊急パッチを公開した。この脆弱性により、Windows仮想マシン内の非管理者ユーザーが高権限操作を実行できる可能性がある。

    @yousukezan

    25 Mar 2025

    1737 Impressions

    0 Retweets

    11 Likes

    4 Bookmarks

    0 Replies

    0 Quotes

  40. 👉VMSA-2025-0005: VMware Tools for Windows update addresses an authentication bypass vulnerability (CVE-2025-22230)! #VMUG #TechCommunity #vExpert #vCommunity #VMwareExplore @VMUGAdv #Patching #windows #cve #CyberSecurity #Vulnerability #Exploit @MyVMUG #infosec https://t.c

    @BhanuNaik_2026

    25 Mar 2025

    26 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  41. New post from https://t.co/uXvPWJy6tj (CVE-2025-22230 | VMware Tools up to 12.5.0 on Windows authentication bypass) has been published on https://t.co/L3k7EqNFJo

    @WolfgangSesin

    25 Mar 2025

    14 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  42. CVE-2025-22230 VMware Tools for Windows contains an authentication bypass vulnerability due to improper access control. A malicious actor with non-administrative privileges on a gue… https://t.co/fzNJLLVQqB

    @CVEnew

    25 Mar 2025

    32 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes