CVE-2020-3992

🗓️ 20 Oct 2020 16:11:13Reported by vmwareType

VMware ESXi OpenSLP Remote Code Executio

Reporter	Title	Published	Views	Family All 34
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in VMware affect IBM Cloud Pak System	19 Jul 202112:35	–	ibm
ATTACKERKB	CVE-2020-3992 — ESXi OpenSLP remote code execution vulnerability	20 Oct 202000:00	–	attackerkb
BDU FSTEC	The vulnerability of the openslp hypervisor packages in VMware ESXi, VMware Workstation, and VMware Fusion allows a malicious actor to execute arbitrary code, cause system failures, or gain unauthorized access to protected information.	29 Oct 202000:00	–	bdu_fstec
Circl	CVE-2020-3992	20 Oct 202020:49	–	circl
CISA KEV Catalog	VMware ESXi OpenSLP Use-After-Free Vulnerability	3 Nov 202100:00	–	cisa_kev
Check Point Advisories	VMware ESXi Remote Code Execution (CVE-2020-3992)	2 Dec 202100:00	–	checkpoint_advisories
CVE	CVE-2020-3992	20 Oct 202016:11	–	cve
GithubExploit	Exploit for Out-of-bounds Write in Vmware Horizon_Daas	4 Feb 202115:15	–	githubexploit
NCSC	Vulnerabilities fixed in VMware products	20 Oct 202000:00	–	ncsc
NVD	CVE-2020-3992	20 Oct 202017:15	–	nvd

[
  {
    "product": "VMware ESXi",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG)"
      }
    ]
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-20-1377/
vmware	www.vmware.com/security/advisories/VMSA-2020-0023.html
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-20-1385/

25 Nov 2020 23:06Current

9.7High risk

Vulners AI Score9.7

EPSS0.9031