CVE-2020-4005

Published Nov 20, 2020 CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Description
VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG) contains a privilege-escalation vulnerability that exists in the way certain system calls are being managed. A malicious actor with privileges within the VMX process only, may escalate their privileges on the affected system. Successful exploitation of this issue is only possible when chained with another vulnerability (e.g. CVE-2020-4004)

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2020-25270 VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG) contains a privilege-escalation vulnerability that exists in the way certain system calls are being managed. A malicious actor with privileges within the VMX process only, may escalate their privileges on the affected system. Successful exploitation of this issue is only possible when chained with another vulnerability (e.g. CVE-2020-4004)
History
Type Values Removed Values Added
CPEs cpe:2.3:o:vmware:cloud_foundation:*:*:*:*:*:*:*:*
Weaknesses

Sources

Status
PUBLISHED
Assigner
vmware
Published
Updated
Aug 4, 2024, 7:52 AM
Reserved
Dec 30, 2019, 12:00 AM
Status
Modified
Published
Nov 20, 2020, 8:15 PM
Modified
Jun 17, 2026, 3:19 AM