Vulnerability · Published Aug 21, 2020 · Assigned by vmware
CVE-2020-3976
Medium 5.3
In plain English
A medium-severity security flaw in ESXi, vCenter Server, and Cloud Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.1% (higher than 82% of all known vulnerabilities).
Severity (CVSS NVD)5.3Medium
Exploit odds (30 days)2.1%top 18.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
VMware ESXi and vCenter Server contain a partial denial of service vulnerability in their respective authentication services. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 5.3.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | ESXi, vCenter Server, and Cloud Foundation | ESXi 7.0, 6.7, 6.5, vCenter Server 7.0, 6.7, 6.5, and Cloud Foundation 4.x.x, and 3.x.x release lines. |
References
- https://www.vmware.com/security/advisories/VMSA-2020-0018.html x_refsource_MISC