{"id":958,"date":"2025-03-05T14:24:27","date_gmt":"2025-03-05T14:24:27","guid":{"rendered":"https:\/\/www.cert.hr\/novosti\/https-www-cert-hr-preuzmite-zakrpe-za-vmware-ranjivosti\/"},"modified":"2026-11-04T08:59:17","modified_gmt":"2026-11-04T08:59:17","slug":"https-www-cert-hr-preuzmite-zakrpe-za-vmware-ranjivosti","status":"publish","type":"post","link":"https:\/\/cert.hr\/en\/ranjivosti\/https-www-cert-hr-preuzmite-zakrpe-za-vmware-ranjivosti\/","title":{"rendered":"Preuzmite zakrpe za VMware ranjivosti"},"content":{"rendered":"

Broadcom je upozorio korisnike na tri VMware ranjivosti koje se koriste u napadima.<\/p>\n\n\n\n

VMware ranjivosti \u010desto se koriste za ransomware napade jer je popularan odabir za virtualizaciju i koriste ga mnogi poslovni korisnici (npr. za pohranu ili prijenos osjetljivih poslovnih podataka).<\/p>\n\n\n\n

Pogo\u0111eni proizvodi: VMware ESXi, VMware Workstation Pro \/ Player (radna stanica), VMware Fusion, VMware Cloud Foundation, VMware Telco Cloud platforma.<\/strong><\/p>\n\n\n\n

Ranjivosti:<\/strong><\/p>\n\n\n\n

CVE-2025-22224<\/a> \u2013 CVSS 9,3<\/span><\/strong>
CVE-2025-22225<\/a> \u2013 CVSS 8,2<\/span><\/strong>
CVE-2025-22226<\/a> \u2013 CVSS 7,1<\/span><\/strong><\/p>\n\n\n\n

Iskori\u0161tavanjem ovih ranjivosti napada\u010di mogu pobje\u0107i iz virtualnog stroja (sandboxa).<\/strong><\/p>\n\n\n\n

Sve o ranjivim verzijama i dostupnim zakrpama prona\u0111ite na stranici: Support Content Notification - Support Portal - Broadcom support portal<\/a>.<\/strong><\/p>\n\n\n\n

Tablica ranjivosti:<\/p>\n\n\n\n

VMware Product<\/strong><\/td>Version<\/strong><\/td>Running On<\/strong><\/td>CVE<\/strong><\/td>CVSSv3<\/strong><\/td>Severity<\/strong><\/td>Fixed Version<\/strong><\/td>Workarounds<\/strong><\/td>Additional Documentation<\/strong><\/td><\/tr>
VMware ESXi<\/td>8.0<\/td>Any<\/td>CVE-2025-22224, CVE-2025-22225, CVE-2025-22226<\/td>9.3<\/a>, 8.2<\/a>, 7.1<\/a><\/td>Critical<\/td>ESXi80U3d-24585383<\/a><\/td>None<\/td>FAQ<\/a><\/td><\/tr>
VMware ESXi<\/td>8.0<\/td>Any<\/td>CVE-2025-22224, CVE-2025-22225, CVE-2025-22226<\/td>9.3<\/a>, 8.2<\/a>, 7.1<\/a><\/td>Critical<\/td>ESXi80U2d-24585300<\/a><\/td>None<\/td>FAQ<\/a><\/td><\/tr>
VMware ESXi<\/td>7.0 <\/td>Any<\/td>CVE-2025-22224, CVE-2025-22225, CVE-2025-22226<\/td>9.3<\/a>, 8.2<\/a>, 7.1<\/a><\/td>Critical<\/td>ESXi70U3s-24585291<\/a><\/td>None<\/td>FAQ<\/a><\/td><\/tr>
VMware Workstation<\/td>17.x<\/td>Any<\/td>CVE-2025-22224,  CVE-2025-22226<\/td>9.3<\/a>, 7.1<\/a><\/td>Critical<\/td>17.6.3<\/td>None<\/td>FAQ<\/a><\/td><\/tr>
VMware Fusion<\/td>13.x<\/td>Any<\/td>CVE-2025-22226<\/td> 7.1<\/a><\/td>Important<\/td>13.6.3<\/td>None<\/td>FAQ<\/a><\/td><\/tr>
VMware Cloud Foundation <\/td>5.x<\/td>Any<\/td>CVE-2025-22224, CVE-2025-22225, CVE-2025-22226<\/td>9.3<\/a>, 8.2<\/a>, 7.1<\/a><\/td>Critical<\/td>Async patch to ESXi80U3d-24585383<\/a><\/td>None<\/td>Async Patching Guide: KB88287<\/a><\/td><\/tr>
VMware Cloud Foundation <\/td>4.5.x<\/td>Any<\/td>CVE-2025-22224, CVE-2025-22225, CVE-2025-22226<\/td>9.3<\/a>, 8.2<\/a>, 7.1<\/a><\/td>Critical<\/td>Async patch to ESXi70U3s-24585291<\/a><\/td>None<\/td>Async Patching Guide: KB88287<\/a><\/td><\/tr>
VMware Telco Cloud Platform<\/td>5.x, 4.x, 3.x, 2.x<\/td>Any<\/td>CVE-2025-22224, CVE-2025-22225, CVE-2025-22226<\/td>9.3<\/a>, 8.2<\/a>, 7.1<\/a><\/td>Critical<\/td>KB389385<\/a><\/td>None<\/td>FAQ<\/a><\/td><\/tr>
VMware Telco Cloud Infrastructure<\/td>3.x, 2.x <\/td>Any<\/td>CVE-2025-22224, CVE-2025-22225, CVE-2025-22226<\/td>9.3<\/a>, 8.2<\/a>, 7.1<\/a><\/td>Critical<\/td>KB389385<\/a><\/td>None<\/td>FAQ<\/a><\/td><\/tr><\/tbody><\/table><\/figure>","protected":false},"excerpt":{"rendered":"

Broadcom je upozorio korisnike na tri VMware ranjivosti koje se koriste u napadima. VMware ranjivosti \u010desto se koriste za ransomware napade jer je popularan odabir za virtualizaciju i koriste ga mnogi poslovni korisnici (npr. za pohranu ili prijenos osjetljivih poslovnih podataka). Pogo\u0111eni proizvodi: VMware ESXi, VMware Workstation Pro \/ Player (radna stanica), VMware Fusion, VMware […]<\/p>\n","protected":false},"author":3,"featured_media":1535,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":[],"meta":{"_acf_changed":false,"footnotes":""},"categories":[27],"tags":[],"tema":[],"class_list":["post-958","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ranjivosti"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/958","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=958"}],"version-history":[{"count":1,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/958\/revisions"}],"predecessor-version":[{"id":1538,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/958\/revisions\/1538"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media\/1535"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=958"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/categories?post=958"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tags?post=958"},{"taxonomy":"tema","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tema?post=958"},{"taxonomy":"format","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/format?post=958"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}