Skip to content
NewA calmer, faster ZeroHour

CVE-2020-4005

CVSS 3.1
7.8 high
EPSS
<1%p32
Published
·
Modified
Analyze CVE-2020-4005 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG) contains a privilege-escalation vulnerability that exists in the way certain system calls are being managed. A malicious actor with privileges within the VMX process only, may escalate their privileges on the affected system. Successful exploitation of this issue is only possible when chained with another vulnerability (e.g. CVE-2020-4004)

Vendors
vmware
Products
cloud foundation, esxi
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In the news

3 stories