Discover VMware Workstation and Fusion Installs Vulnerable to The Latest Zero-Day Vulnerabilities
VMware has released security updates for their Workstation and Fusion software. The patches address 4 vulnerabilities, 2 of which (CVE-2023-20869 and CVE-2023-20870) could lead to code execution or allow an attacker to access sensitive data. You can learn more about these security updates in our VMware Vulnerability Blog.
To make sure that all your VMware Workstation and Fusion installs are up to date and protected, the report below provides an overview of all installs on Windows and Mac that are still at risk, so that you can update them accordingly.
VMware Workstation and Fusion Vulnerability Audit Lansweeper Classic Query
Select distinct Top 1000000 tblAssets.AssetID,
tblAssets.AssetName,
tblAssets.Domain,
tsysAssetTypes.AssetTypename As AssetType,
tblAssets.Username,
tblAssets.Userdomain,
tsysAssetTypes.AssetTypeIcon10 As icon,
tblAssets.IPAddress,
tblSoftwareUni.softwareName As Software,
tblSoftware.softwareVersion As Version,
Case
When (tblSoftwareUni.softwareName in ('VMware Workstation','VMware Player'))
Then '17.0.2 or higher'
End As [Fixed Version],
tblSoftwareUni.SoftwarePublisher As Publisher,
tsysIPLocations.IPLocation,
tblAssetCustom.Manufacturer,
tblAssetCustom.Model,
tsysOS.OSname As OS,
tblAssets.SP,
Case
When tblErrors.ErrorText Is Not Null Or
tblErrors.ErrorText != '' Then
'Scanning Error: ' + tsysasseterrortypes.ErrorMsg
Else ''
End As ScanningErrors,
tblAssets.Lastseen,
tblAssets.Lasttried
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
Inner Join tsysIPLocations On tsysIPLocations.LocationID =
tblAssets.LocationID
Inner Join tblState On tblState.State = tblAssetCustom.State
Inner Join tblSoftware On tblAssets.AssetID = tblSoftware.AssetID
Inner Join tblSoftwareUni On tblSoftwareUni.SoftID = tblSoftware.softID AND tblSoftwareUni.softwarename in ('VMware Workstation','VMware Player')
Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
Left Join (Select Distinct Top 1000000 tblErrors.AssetID As ID,
Max(tblErrors.Teller) As ErrorID
From tblErrors
Group By tblErrors.AssetID) As ScanningError On tblAssets.AssetID =
ScanningError.ID
Left Join tblErrors On ScanningError.ErrorID = tblErrors.Teller
Left Join tsysasseterrortypes On tsysasseterrortypes.Errortype =
tblErrors.ErrorType
Where
Cast(ParseName(tblSoftware.softwareVersion, 3) As bigint) = 17 AND
Cast(ParseName(tblSoftware.softwareVersion, 2) As bigint) = 0 AND
Cast(ParseName(tblSoftware.softwareVersion, 1) As bigint) < 2
UNION
Select distinct Top 1000000 tblAssets.AssetID,
tblAssets.AssetName,
tblAssets.Domain,
tsysAssetTypes.AssetTypename As AssetType,
tblAssets.Username,
tblAssets.Userdomain,
tsysAssetTypes.AssetTypeIcon10 As icon,
tblAssets.IPAddress,
tblSoftwareUni.softwareName As Software,
tblMacApplications.Version As Version,
Case
When tblSoftwareUni.softwareName like '%vmware fusion%'
Then '13.0.2 or higher'
End As [Fixed Version],
tblSoftwareUni.SoftwarePublisher As Publisher,
tsysIPLocations.IPLocation,
tblAssetCustom.Manufacturer,
tblAssetCustom.Model,
tsysOS.OSname As OS,
tblAssets.SP,
Case
When tblErrors.ErrorText Is Not Null Or
tblErrors.ErrorText != '' Then
'Scanning Error: ' + tsysasseterrortypes.ErrorMsg
Else ''
End As ScanningErrors,
tblAssets.Lastseen,
tblAssets.Lasttried
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
Inner Join tsysIPLocations On tsysIPLocations.LocationID =
tblAssets.LocationID
Inner Join tblState On tblState.State = tblAssetCustom.State
Inner Join tblMacApplications On tblAssets.AssetID = tblMacApplications.AssetID
Inner Join tblSoftwareUni On tblSoftwareUni.SoftID =
tblMacApplications.softid AND (tblSoftwareUni.softwareName like '%vmware fusion%')
Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
Left Join (Select Distinct Top 1000000 tblErrors.AssetID As ID,
Max(tblErrors.Teller) As ErrorID
From tblErrors
Group By tblErrors.AssetID) As ScanningError On tblAssets.AssetID =
ScanningError.ID
Left Join tblErrors On ScanningError.ErrorID = tblErrors.Teller
Left Join tsysasseterrortypes On tsysasseterrortypes.Errortype =
tblErrors.ErrorType
Where
(IsNumeric(ParseName(tblMacApplications.Version, 3)) = 1 AND
Cast(ParseName(tblMacApplications.Version, 3) As bigint) = 13)
AND
(IsNumeric(ParseName(tblMacApplications.Version, 2)) = 1 AND
Cast(ParseName(tblMacApplications.Version, 2) As bigint) = 0 )
AND
(IsNumeric(ParseName(tblMacApplications.Version, 1)) = 1 AND
Cast(ParseName(tblMacApplications.Version, 1) As bigint) < 2)
