CVE-2012-2450

CVE-2012-2450 is a critical vulnerability affecting multiple VMware products, including Workstation, Player, Fusion, ESXi, and ESX. It stems from improper SCSI device registration, allowing guest OS users with administrative privileges to trigger a denial of service (VMX process crash) or potentially execute arbitrary code on the host. With a CVSS score of 9.0, this vulnerability is highly severe, indicating a network-based attack with low complexity that can lead to complete compromise of confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.