NSX VMSA-2025-0016

Products

• VMware NSX

Issue/Introduction

This is for the related VMSA-2025-0016: VMware vCenter and NSX updates address multiple vulnerabilities (CVE-2025-41250, CVE-2025-41251, CVE-2025-41252)

Environment

VMware NSX 

Cause

Due to a weak password recovery mechanism vulnerability a non-administrative can create a valid use which can lead to brute force attacks 

Resolution

Upgrade to the following version to be safe 

For NSX  3.x

Fix version : 3.2.4.3 

For NSX 4.1.x 

Fix version: 4.1.2.7

For NSX 4.2.x

Fix version: 4.2.2.2 and 4.2.3.1 

Additional Information

Security advisory 

Product Interoperability Matrix