HCX - Mobility Agent (MA) host is unaffected from VMware Advisory CVE-2025-22224, CVE-2025-22225, CVE-2025-22226

Products

• VMware HCX

Issue/Introduction

HCX Mobility Agent (MA) hosts may get flagged for VMware Advisory CVE-2025-22224, CVE-2025-22225, CVE-2025-22226  while running a 3rd party scanning tool like Qualys.

Resolution

The HCX-IX appliance adds the MA (Mobility Agent) service as a host object in the vCenter Server. MA host is a dummy ESXi server used to perform vMotion, Cold, and Replication Assisted vMotion (RAV) migrations for HCX.

MA doesn't expose the same services & open the amount of ports like a traditional ESXi server. Therefore, MA should not be considered vulnerable for the above CVEs.