CVE-2013-5973

CVE-2013-5973 describes a local privilege escalation vulnerability affecting VMware ESXi and ESX versions 4.0 through 5.5. An authenticated local user with Virtual Machine Power User or Resource Pool Administrator roles can read or modify arbitrary files by manipulating filenames during a vCenter Server Add Existing Disk action. This vulnerability has a CVSS score of 4.4 (medium severity) due to its local attack vector and moderate attack complexity, potentially leading to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.