CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-10-20
VMware ESXi OpenSLP Use-After-Free Remote Code Execution Vulnerability (CVE-2020-3992) Analysis and Mitigation Guide
[Affected Scope] VMware ESXi 7.0 (prior to ESXi_7.0.1-0.0.16850804), 6.7 (prior to ESXi670-202010401-SG), and 6.5 (prior to ESXi650-202010401-SG)
[Impact] A malicious actor with access to port 427 on the management network can trigger a Use-After-Free in the OpenSLP service, leading to unauthenticated Remote Code Execution (RCE)
[Mitigation] Apply the official VMware security patches immediately, or disable the OpenSLP service on ESXi hosts as a temporary workaround