The U.S. National Security Agency issued a warning that Russian state-sponsored threat actors are attempting to exploit a known vulnerability in several VMware products. The issue centers on a command injection vulnerability, tracked as CVE-2020-4006. The affected company products include:VMware Access 3 20.01 and 20.10 on Linux4.1, 33.3.2, and 3.3 on Linux. Vulnerability is not simple, the NSA notes, as it requires authenticated password-based access to the management interface of the device.”]
Source: https://www.cuinfosecurity.com/nsa-russian-hackers-exploiting-vmware-vulnerability-a-15538

