Vulnerability · Published Nov 20, 2020 · Assigned by vmware
CVE-2020-4005
High 7.8
In plain English
A high-severity security flaw in VMware ESXi. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities).
Severity (CVSS NVD)7.8High
Exploit odds (30 days)0.4%top 67.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG) contains a privilege-escalation vulnerability that exists in the way certain system calls are being managed. A malicious actor with privileges within the VMX process only, may escalate their privileges on the affected system. Successful exploitation of this issue is only possible when chained with another vulnerability (e.g. CVE-2020-4004)
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | VMware ESXi | 7.0 before ESXi70U1b-171682066.7 before ESXi670-202011101-SG6.5 before ESXi650-202011301-SG |
References
- https://www.vmware.com/security/advisories/VMSA-2020-0026.html x_refsource_CONFIRM