Live › vulnerability › CVE-2020-3992
Go to dashboardVMware ESXi's OpenSLP service has a use-after-free bug that lets an attacker on the management network reach port 427 and run code on the host. CISA lists it as actively exploited, with ransomware use noted in its catalog.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 0h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| VMware ESXi | vendor | – | – |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a use-after-free issue. A malicious actor residing in the management network who has access to port 427 on an ESXi machine may be able to trigger a use-after-free in the OpenSLP service resulting in remote code execution.
This page as .md · .json · in your agent: get_signal("CVE-2020-3992")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.