Firetruck

CVE-2020-3992

KEV · Ransomware
Updated Aug 12, 2026 · PUBLISHED
View KEV entry →

Description

VMware ESXi OpenSLP contains a use-after-free vulnerability that allows an attacker residing in the management network with access to port 427 to perform remote code execution.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
VMware ESXin/a / VMware ESXiVMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG)affected