vulnerability
VMSA-2019-0013: VMware ESXi 'busybox' command injection vulnerability (CVE-2017-16544)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:L/Au:S/C:P/I:P/A:P) | Nov 20, 2017 | Sep 23, 2019 | Oct 7, 2025 |
Severity
7
CVSS
(AV:N/AC:L/Au:S/C:P/I:P/A:P)
Published
Nov 20, 2017
Added
Sep 23, 2019
Modified
Oct 7, 2025
Description
ESXi contains a command injection vulnerability due to the use of vulnerable version of busybox that does not sanitize filenames which may result into executing any escape sequence in the shell.
Solutions
vmware-esxi60-upgrade-14513180vmware-esxi65-upgrade-13932383vmware-esxi67-upgrade-13004448
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.