← CVE Radar
CVE-2020-3992VMware ESXi OpenSLP Use-After-Free Vulnerability
OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a use-after-free issue. A malicious actor residing in the management network who has access to port 427 on an ESXi machine may be able to trigger a use-after-free in the OpenSLP service resulting in remote code execution.
9.8 CRITICALEPSS 83.01%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 10.0 | HIGH | 2.0NVD | AV:N/AC:L/Au:N/C:C/I:C/A:C |
CISA required action
⚡ Known exploited · remediation due May 3, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2020-3992
- Status
- Analyzed
- Assigner (CNA)
- vmware
- Published
- Oct 20, 2020
- Last modified
- 2026-08-12 05:17 UTC
- Weaknesses
Affected Products
As published by the CNA in the CVE record.
VMware ESXi1 version range
- VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG)
References
- vmware.com https://www.vmware.com/security/advisories/VMSA-2020-0023.html
- zerodayinitiative.com https://www.zerodayinitiative.com/advisories/ZDI-20-1377/
- zerodayinitiative.com https://www.zerodayinitiative.com/advisories/ZDI-20-1385/
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-3992