NSA Warns of Command Injection Vulnerability Affecting VMware Products

The vulnerability requires network access to the administrative configurator on port 8443 (though this can be configured to be any port) and a valid password for the configurator admin account.