PT-2020-4966 · Vmware · Vmware Esxi

Published 2020-11-19 · Updated 2025-10-31 · CVE-2020-4005

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VMware ESXi versions 7.0 before ESXi70U1b-17168206 VMware ESXi versions 6.7 before ESXi670-202011101-SG VMware ESXi versions 6.5 before ESXi650-202011301-SG

Description The issue exists in the way certain system calls are being managed, allowing a malicious actor with privileges within the VMX process to escalate their privileges on the affected system. Successful exploitation of this issue is only possible when chained with another vulnerability. The vulnerability is related to a lack of protection for internal data.

Recommendations For versions 7.0 before ESXi70U1b-17168206, update to ESXi70U1b-17168206 or later. For versions 6.7 before ESXi670-202011101-SG, update to ESXi670-202011101-SG or later. For versions 6.5 before ESXi650-202011301-SG, update to ESXi650-202011301-SG or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2020-05542

CVE-2020-4005

Affected Products

Vmware Esxi

References · 9

• https://vmware.com/security/advisories/VMSA-2020-0026.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-4005 · Security Note
• https://bdu.fstec.ru/vul/2020-05542 · Security Note
• https://osv.dev/vulnerability/CVE-2020-4005 · Vendor Advisory
• https://t.me/defcon_news/62193 · Telegram Post
• https://t.me/cvenotify/5949 · Telegram Post
• https://t.me/cvenotify/6539 · Telegram Post
• https://t.me/cibsecurity/16681 · Telegram Post
• https://t.me/cveNotify/141099 · Telegram Post