CVE-2025-62627
HighSummary
An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel memory or co-located guest VM memory.
Risk Assessment
This could result in loss of confidentiality or availability of data within the organization, posing a significant security threat.
Recommendation
It is recommended to update the ionic cloud driver to the latest version and monitor access to kernel memory and virtual machines.
Other vulnerabilities in ionic cloud driver for VMWare ESXi
See all- CVE-2025-62624High
A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
- CVE-2025-62623High
A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
Original NVD description (English source)
An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel memory or co-located guest VM memory, potentially resulting in loss of confidentiality or availability.