PT-2020-4398 · Vmware · Vmware Esxi

Lucas Leong

+1

·

Published

2020-10-15

·

Updated

2026-01-30

·

CVE-2020-3992

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: VMware ESXi versions 7.0 before ESXi 7.0.1-0.0.16850804 VMware ESXi versions 6.7 before ESXi670-202010401-SG VMware ESXi versions 6.5 before ESXi650-202010401-SG
Description: The issue is related to a use-after-free problem in the OpenSLP service. A malicious actor with access to port 427 on an ESXi machine may be able to trigger this issue, resulting in remote code execution. This could allow an attacker to execute arbitrary code, cause a denial of service, or gain unauthorized access to protected information.
Recommendations: For VMware ESXi version 7.0, update to a version after ESXi 7.0.1-0.0.16850804. For VMware ESXi version 6.7, update to a version after ESXi670-202010401-SG. For VMware ESXi version 6.5, update to a version after ESXi650-202010401-SG. As a temporary workaround, consider restricting access to port 427 on the ESXi machine to minimize the risk of exploitation.

Exploit

Fix

RCE

Use After Free

Weakness Enumeration

Related Identifiers

BDU:2020-04911
CVE-2020-3992
ZDI-20-1269
ZDI-20-1377
ZDI-20-1385

Affected Products

Vmware Esxi