CVE-2020-3992 VMware ESXi
VMware ESXi OpenSLP contains a use-after-free vulnerability that allows an attacker residing in the management network with access to port 427 to perform remote code execution.
- CVSS
- not scored
On CISA’s exploited list
VMware ESXi OpenSLP Use-After-Free Vulnerability
- Added
- 2021-11-03
- Federal patch deadline
- 2022-05-03
- Ransomware use
- known