VMware Releases Advisory for VMware Tools Vulnerabilities
All CISA Advisories, CISA, October 30, 2023
VMware released a security advisory addressing multiple vulnerabilities (CVE-2023-34057, CVE-2023-34058) in VMware Tools. A cyber actor could exploit one of these vulnerabilities to take control of an affected system.
CISA encourages users and administrators to review the VMware advisory VMSA-2023-0024 and apply the necessary updates.
Speak with an ASSURANT™ team member to learn how ASSURANT™ can support your organization or project.
Schedule an ASSURANT™ demo to see how other organizations have modeled and analyzed their systems
Receive access to ASSURANT™ to model your use case or scenario.
“This system allowed me to identify missing components when the model validation engine ran. These were components which had infrequent changes and therefore were not commonly documented. The ASSURANT™ model told us that there were some elements missing. When we compared our sources against the model result, we discovered existing legacy components which had previously lacked documentation. The addition of these components to the model has given us confidence in the model’s completeness and improved our cyber readiness.”
Cyber Model Engineer
“Without the ASSURANT™ attack path analysis visual capability, it’s difficult to explain the complexities of a cyber battlespace to non-experts, and us good guys in the fight are often only learning from our mistakes in the wake of a cyber-attack. The different ways to visualize attack paths allows time to get ahead of the tactics and techniques of cyber actors by allowing us to simulate “black hat” scenarios for when a network artifact becomes compromised.”
Attack Path Analyst
"Empower SCADA security with continuous vulnerability monitoring through cutting-edge modeling" [...]
“Unleash the power of modeling and simulation for smarter, more [...]
“Unleash the power of modeling and simulation for smarter, more [...]
1408 University Dr
College Station, TX 77840
(979) 260-1980
sales@kbsi.com
This material is based upon work supported by the United States Air Force under Contract No. FA8650-23-D-1061. Any opinions, findings and conclusions or recommendations expressed in this material are those of the author(s) and do not necessarily reflect the views of the United States Air Force.
