CVE-2017-4943

CVE-2017-4943 is a local privilege escalation vulnerability affecting VMware vCenter Server Appliance (vCSA) versions 6.5 before 6.5 U1d, specifically within the 'showlog' plugin. This flaw allows a low-privileged user to gain root-level access to the appliance's underlying operating system. With a CVSS score of 7.8 (High), exploitation is considered low complexity and requires local access, leading to high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, though it has received some community discussion and media coverage.