Umbra Wiki cve cve/CVE-2020-3992
Back to wiki

CVE-2020-3992 — VMware ESXi OpenSLP Use-After-Free Vulnerability

provenance: imported · CVE: CVE-2020-3992 · CWE: CWE-416

CVE-2020-3992: VMware ESXi OpenSLP Use-After-Free Vulnerability

CISA Known Exploited Vulnerability (KEV)

Vendor / project VMware
Product ESXi
Date added 2021-11-03
Due date 2022-05-03
Ransomware campaign use Known

Description

VMware ESXi OpenSLP contains a use-after-free vulnerability that allows an attacker residing in the management network with access to port 427 to perform remote code execution.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2020-3992

Weakness behind it

CISA records this vulnerability as an instance of CWE-416. From there the chain continues into CAPEC attack patterns and ATT&CK techniques, all inside this corpus.

References

  • NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-3992
  • KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

See all 1,745 pages under Vulnerabilities (CVE) →