Zultys Security Advisory Notice - SAN25-002 Rev 1.0

VMware ESXi multiple vulnerabilities (VMSA-2025-0004)

Severity: No Impact

Published: 2025-03-28

Updated: 2025-03-28

Revision: 1.0

Evaluated Products

Zultys Cloud Services

Impacted Products

None

Affected Releases

Not applicable

Impacted 3rd Party Products

Not applicable

Introduction

On March 4, 2025 Broadcom published security advisory VMSA-2025-0004 detailing multiple vulnerabilities in VMware ESXi.

  • CVE-2025-22224 – VMCI heap-overflow vulnerability

  • CVE-2025-22225 – VMware ESXi arbitrary write vulnerability

  • CVE-2025-22226 – HGFS information-disclosure vulnerability

Description

All VMware ESXi systems related to Zultys Cloud Services have been updated as per Broadcom’s recommendations.

Customers utilizing VMware ESXi to host MX-Virtual systems and related applications should review the information available from Broadcom and ensure appropriate steps are taken to mitigate any risks with their infrastructure.

Contact

If additional information is required contact support@zultys.com or your Authorized Zultys Channel Partner.