U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2022-31705

Change History

Initial Analysis by NIST 12/19/2022 10:43:22 AM

Action Type Old Value New Value
Added CPE Configuration

								
							
							
						
AND
     OR
          *cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:* versions from (including) 12.0.0 up to (excluding) 12.2.5
     OR
          cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
OR
     *cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:* versions from (including) 16.0.0 up to (excluding) 16.2.5
     *cpe:2.3:o:vmware:esxi:7.0:-:*:*:*:*:*:*
     *cpe:2.3:o:vmware:esxi:7.0:beta:*:*:*:*:*:*
     *cpe:2.3:o:vmware:esxi:7.0:update_1:*:*:*:*:*:*
     *cpe:2.3:o:vmware:esxi:7.0:update_1a:*:*:*:*:*:*
     *cpe:2.3:o:vmware:esxi:7.0:update_1b:*:*:*:*:*:*
     *cpe:2.3:o:vmware:esxi:7.0:update_1c:*:*:*:*:*:*
     *cpe:2.3:o:vmware:esxi:7.0:update_1d:*:*:*:*:*:*
     *cpe:2.3:o:vmware:esxi:7.0:update_1e:*:*:*:*:*:*
     *cpe:2.3:o:vmware:esxi:7.0:update_2:*:*:*:*:*:*
     *cpe:2.3:o:vmware:esxi:7.0:update_2a:*:*:*:*:*:*
     *cpe:2.3:o:vmware:esxi:7.0:update_2c:*:*:*:*:*:*
     *cpe:2.3:o:vmware:esxi:7.0:update_2d:*:*:*:*:*:*
     *cpe:2.3:o:vmware:esxi:7.0:update_2e:*:*:*:*:*:*
     *cpe:2.3:o:vmware:esxi:7.0:update_3c:*:*:*:*:*:*
     *cpe:2.3:o:vmware:esxi:7.0:update_3d:*:*:*:*:*:*
     *cpe:2.3:o:vmware:esxi:7.0:update_3e:*:*:*:*:*:*
     *cpe:2.3:o:vmware:esxi:7.0:update_3f:*:*:*:*:*:*
     *cpe:2.3:o:vmware:esxi:7.0:update_3g:*:*:*:*:*:*
     *cpe:2.3:o:vmware:esxi:8.0:-:*:*:*:*:*:*
Added CVSS V3.1

								
							
							
						
NIST AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Added CWE

								
							
							
						
NIST CWE-787
Changed Reference Type
https://www.vmware.com/security/advisories/VMSA-2022-0033.html No Types Assigned
https://www.vmware.com/security/advisories/VMSA-2022-0033.html Vendor Advisory