CyberSec.Space Logo
返回 CVE 浏览器

CVE-2020-3992

Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
EPSS Score29.9880%
EPSS Percentile85.38th
Published2020年10月20日
Last Modified2025年10月30日

Vulnerability Description

OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a use-after-free issue. A malicious actor residing in the management network who has access to port 427 on an ESXi machine may be able to trigger a use-after-free in the OpenSLP service resulting in remote code execution.

Affected Platforms (CPE)

📦
Vmware

Cloud Foundation

>= 3.0 and < 3.10.1.2
📦
Vmware

Cloud Foundation

>= 4.0 and < 4.1.0.1
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.5
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 6.7
💻
Vmware

Esxi

= 7.0.0
💻
Vmware

Esxi

= 7.0.0

References & Advisories

🔗 https://www.vmware.com/security/advisories/VMSA-2020-0023.html
🔗 https://www.zerodayinitiative.com/advisories/ZDI-20-1377/
🔗 https://www.zerodayinitiative.com/advisories/ZDI-20-1385/
🔗 https://www.vmware.com/security/advisories/VMSA-2020-0023.html
🔗 https://www.zerodayinitiative.com/advisories/ZDI-20-1377/
🔗 https://www.zerodayinitiative.com/advisories/ZDI-20-1385/
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-3992

相关漏洞威胁

CVE-2020-1184410.0

Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Ma...

CVE-2017-49929.8

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v261; UAA release 2.x versions prior to v2.7.4.17...

CVE-2021-219729.8

The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with netwo...

CVE-2016-66559.8

An issue was discovered in Cloud Foundry Foundation Cloud Foundry release versions prior to v245 and cf-mysql-release versions pri...