{"id":27095,"date":"2022-10-23T07:00:54","date_gmt":"2022-10-23T05:00:54","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=27095"},"modified":"2022-10-23T07:00:54","modified_gmt":"2022-10-23T05:00:54","slug":"vmware-schwachstelle-cve-2022-22954-durch-ransomware-bedroht-support-ende-fr-esxi-6-5-6-7","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2022\/10\/23\/vmware-schwachstelle-cve-2022-22954-durch-ransomware-bedroht-support-ende-fr-esxi-6-5-6-7\/","title":{"rendered":"VMware vulnerability CVE-2022-22954 threatened by ransomware, end of support for ESXi 6.5 & 6.7"},"content":{"rendered":"

\"Sicherheit[German<\/a>]Various VMware products contain the critical vulnerability CVE-2022-22954 , for which a security update was provided back in April 2022. I had addressed the vulnerability in the blog post Warning: critical vulnerabilities in VMware products (April 6, 2022). <\/p>\n

<\/p>\n

Critical vulnerability CVE-2022-22954<\/h2>\n

\"\"Various VMware products contain the critical vulnerability CVE-2022-22954 , for which a security update was already provided in April 2022. I had addressed the vulnerability in the German blog post Warnung: Kritische Schwachstellen in VMware-Produkten (6. April 2022)<\/a> that this vulnerability was the focus of hackers installing a backdoor on unpatched VMware products. In a recent articleHackers exploit critical VMware flaw to drop ransomware, miners<\/a> colleagues at Bleeping Computer warn against attacking the vulnerability.<\/p>\n

Security researchers have observed new malicious campaigns that exploit the critical CVE-2022-22954 vulnerability in VMware Workspace One Access to spread various malware. Among them is the injection of the RAR1Ransom tool, which locks files in password-protected archives. <\/p>\n

Fortinet security researchers discovered campaigns in which threat actors used the Mira botnet for distributed denial-of-service (DDoS) attacks, the GuardMiner cryptocurrency miner and the RAR1Ransom tool.<\/p>\n

End of support for ESXi 6.5 & 6.7 servers<\/h2>\n

VMware's ESXi 6.5 & 6.7 Server products have reached the end of support, for example, as Lansweeper writes in the following tweet<\/a> and in this article<\/a>. It says that ESXi 6.5 and 6.7 will be out of general support on October 15, 2022. <\/p>\n

\"EOL<\/a><\/p>\n

The Technical Guidance phase will run until November 15, 2023. However, VMware is offering 2 years of extended support for ESXi 6.5 and 6.7, which means you will be eligible for support until October 15, 2024. To receive continuous support, you must purchase extended support before the end of general support. This extended support does not include updates to third-party software packages. There will be no architectural improvements, performance enhancements, or feature enhancements. Security patches are limited to one roll-up per year.<\/p>\n

Bleeping Computer writes here<\/a>, that more than 45,000 VMware ESXi servers are affected by this end-of-life (EOL) and will now no longer receive software and security updates without extended support.<\/p>\n

\"Migrate<\/a><\/p>\n

The tweet<\/a> above from xcp-ng.org use the end of support to promotes a switch to XCP-ng as a virtualization solution. In this article<\/a> possible reasons for the switch include the new VMware licensing model and the recent acquisition by Broadcom are mentioned.<\/p>\n","protected":false},"excerpt":{"rendered":"

[German]Various VMware products contain the critical vulnerability CVE-2022-22954 , for which a security update was provided back in April 2022. I had addressed the vulnerability in the blog post Warning: critical vulnerabilities in VMware products (April 6, 2022).<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[580,1547,1218],"tags":[69,1710],"class_list":["post-27095","post","type-post","status-publish","format-standard","hentry","category-security","category-software","category-virtualization","tag-security","tag-vmware"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/27095","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=27095"}],"version-history":[{"count":0,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/27095\/revisions"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=27095"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=27095"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=27095"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}