Discover VMware Workstation and Fusion Installs Vulnerable to The Latest Zero-Day Vulnerabilities
VMware has released security updates for their Workstation and Fusion software. The patches address 4 vulnerabilities, 2 of which (CVE-2023-20869 and CVE-2023-20870) could lead to code execution or allow an attacker to access sensitive data. You can learn more about these security updates in our VMware Vulnerability Blog.
To make sure that all your VMware Workstation and Fusion installs are up to date and protected, the report below provides an overview of all installs on Windows and Mac that are still at risk, so that you can update them accordingly.
VMware Workstation and Fusion Vulnerability Audit Lansweeper Classic Query
Select distinct Top 1000000 tblAssets.AssetID, tblAssets.AssetName, tblAssets.Domain, tsysAssetTypes.AssetTypename As AssetType, tblAssets.Username, tblAssets.Userdomain, tsysAssetTypes.AssetTypeIcon10 As icon, tblAssets.IPAddress, tblSoftwareUni.softwareName As Software, tblSoftware.softwareVersion As Version, Case When (tblSoftwareUni.softwareName in ('VMware Workstation','VMware Player')) Then '17.0.2 or higher' End As [Fixed Version], tblSoftwareUni.SoftwarePublisher As Publisher, tsysIPLocations.IPLocation, tblAssetCustom.Manufacturer, tblAssetCustom.Model, tsysOS.OSname As OS, tblAssets.SP, Case When tblErrors.ErrorText Is Not Null Or tblErrors.ErrorText != '' Then 'Scanning Error: ' + tsysasseterrortypes.ErrorMsg Else '' End As ScanningErrors, tblAssets.Lastseen, tblAssets.Lasttried From tblAssets Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype Inner Join tsysIPLocations On tsysIPLocations.LocationID = tblAssets.LocationID Inner Join tblState On tblState.State = tblAssetCustom.State Inner Join tblSoftware On tblAssets.AssetID = tblSoftware.AssetID Inner Join tblSoftwareUni On tblSoftwareUni.SoftID = tblSoftware.softID AND tblSoftwareUni.softwarename in ('VMware Workstation','VMware Player') Left Join tsysOS On tsysOS.OScode = tblAssets.OScode Left Join (Select Distinct Top 1000000 tblErrors.AssetID As ID, Max(tblErrors.Teller) As ErrorID From tblErrors Group By tblErrors.AssetID) As ScanningError On tblAssets.AssetID = ScanningError.ID Left Join tblErrors On ScanningError.ErrorID = tblErrors.Teller Left Join tsysasseterrortypes On tsysasseterrortypes.Errortype = tblErrors.ErrorType Where Cast(ParseName(tblSoftware.softwareVersion, 3) As bigint) = 17 AND Cast(ParseName(tblSoftware.softwareVersion, 2) As bigint) = 0 AND Cast(ParseName(tblSoftware.softwareVersion, 1) As bigint) < 2 UNION Select distinct Top 1000000 tblAssets.AssetID, tblAssets.AssetName, tblAssets.Domain, tsysAssetTypes.AssetTypename As AssetType, tblAssets.Username, tblAssets.Userdomain, tsysAssetTypes.AssetTypeIcon10 As icon, tblAssets.IPAddress, tblSoftwareUni.softwareName As Software, tblMacApplications.Version As Version, Case When tblSoftwareUni.softwareName like '%vmware fusion%' Then '13.0.2 or higher' End As [Fixed Version], tblSoftwareUni.SoftwarePublisher As Publisher, tsysIPLocations.IPLocation, tblAssetCustom.Manufacturer, tblAssetCustom.Model, tsysOS.OSname As OS, tblAssets.SP, Case When tblErrors.ErrorText Is Not Null Or tblErrors.ErrorText != '' Then 'Scanning Error: ' + tsysasseterrortypes.ErrorMsg Else '' End As ScanningErrors, tblAssets.Lastseen, tblAssets.Lasttried From tblAssets Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype Inner Join tsysIPLocations On tsysIPLocations.LocationID = tblAssets.LocationID Inner Join tblState On tblState.State = tblAssetCustom.State Inner Join tblMacApplications On tblAssets.AssetID = tblMacApplications.AssetID Inner Join tblSoftwareUni On tblSoftwareUni.SoftID = tblMacApplications.softid AND (tblSoftwareUni.softwareName like '%vmware fusion%') Left Join tsysOS On tsysOS.OScode = tblAssets.OScode Left Join (Select Distinct Top 1000000 tblErrors.AssetID As ID, Max(tblErrors.Teller) As ErrorID From tblErrors Group By tblErrors.AssetID) As ScanningError On tblAssets.AssetID = ScanningError.ID Left Join tblErrors On ScanningError.ErrorID = tblErrors.Teller Left Join tsysasseterrortypes On tsysasseterrortypes.Errortype = tblErrors.ErrorType Where (IsNumeric(ParseName(tblMacApplications.Version, 3)) = 1 AND Cast(ParseName(tblMacApplications.Version, 3) As bigint) = 13) AND (IsNumeric(ParseName(tblMacApplications.Version, 2)) = 1 AND Cast(ParseName(tblMacApplications.Version, 2) As bigint) = 0 ) AND (IsNumeric(ParseName(tblMacApplications.Version, 1)) = 1 AND Cast(ParseName(tblMacApplications.Version, 1) As bigint) < 2)