Read the docs
TI-2020-03469 Aliases CVE-2020-3971GHSA-5vvr-23q8-x3qg

Out-of-bounds write in VMware ESXi

Priority LOW 25CWE-787Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201907101-SG), Workstation (15.x before 15.0.2), and Fusion (11.x before 11.0.2) contain a heap overflow vulnerability in the vmxnet3 virtual network adapter. A malicious actor with local access to a virtual machine with a vmxnet3 network adapter present may be able to read privileged information contained in physical memory.

Why it matters now

EPSS 0.00348 28th percentileScored 2026-11-07
Fix Fixed Workstation (VMware): 15.0.2Fusion (VMware): 11.0.2

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
VMwareVMware ESXi6.7 before ESXi670-201904101-SG; 6.5 before ESXi650-201907101-SG—No fix listedCNA
VMwareWorkstation15 to before 15.0.215.0.2Patch availableCNA
VMwareFusion11 to before 11.0.211.0.2Patch availableCNA
  • VMware ESXi VendorVMware Affected 6.7 before ESXi670-201904101-SG; 6.5 before ESXi650-201907101-SG Fixed in — No fix listed CNA
  • Workstation VendorVMware Affected 15 to before 15.0.2 Fixed in 15.0.2 Patch available CNA
  • Fusion VendorVMware Affected 11 to before 11.0.2 Fixed in 11.0.2 Patch available CNA

CPE configurations NVD · 94

CPEVersionsRoleVendor
cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*3.0 to before 3.7.2VulnerableVMware
cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:*11.0.0 to before 11.0.2VulnerableVMware
cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:*15.0.0 to before 15.0.2VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:*6.5VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201701001:*:*:*:*:*:*6.5 650-201701001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201703001:*:*:*:*:*:*6.5 650-201703001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201703002:*:*:*:*:*:*6.5 650-201703002VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201704001:*:*:*:*:*:*6.5 650-201704001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707101:*:*:*:*:*:*6.5 650-201707101VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707102:*:*:*:*:*:*6.5 650-201707102VulnerableVMware
  • cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:* Versions 3.0 to before 3.7.2 Vulnerable ·VMware
  • cpe:2.3:a:vmware:fusion:*:*:*:*:*:*:*:* Versions 11.0.0 to before 11.0.2 Vulnerable ·VMware
  • cpe:2.3:a:vmware:workstation:*:*:*:*:*:*:*:* Versions 15.0.0 to before 15.0.2 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:* Versions 6.5 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201701001:*:*:*:*:*:* Versions 6.5 650-201701001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201703001:*:*:*:*:*:* Versions 6.5 650-201703001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201703002:*:*:*:*:*:* Versions 6.5 650-201703002 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201704001:*:*:*:*:*:* Versions 6.5 650-201704001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707101:*:*:*:*:*:* Versions 6.5 650-201707101 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707102:*:*:*:*:*:* Versions 6.5 650-201707102 Vulnerable ·VMware
Show 84 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:vmware:esxi:6.5:650-201707103:*:*:*:*:*:*6.5 650-201707103VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707201:*:*:*:*:*:*6.5 650-201707201VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707202:*:*:*:*:*:*6.5 650-201707202VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707203:*:*:*:*:*:*6.5 650-201707203VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707204:*:*:*:*:*:*6.5 650-201707204VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707205:*:*:*:*:*:*6.5 650-201707205VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707206:*:*:*:*:*:*6.5 650-201707206VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707207:*:*:*:*:*:*6.5 650-201707207VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707208:*:*:*:*:*:*6.5 650-201707208VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707209:*:*:*:*:*:*6.5 650-201707209VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707210:*:*:*:*:*:*6.5 650-201707210VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707211:*:*:*:*:*:*6.5 650-201707211VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707212:*:*:*:*:*:*6.5 650-201707212VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707213:*:*:*:*:*:*6.5 650-201707213VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707214:*:*:*:*:*:*6.5 650-201707214VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707215:*:*:*:*:*:*6.5 650-201707215VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707216:*:*:*:*:*:*6.5 650-201707216VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707217:*:*:*:*:*:*6.5 650-201707217VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707218:*:*:*:*:*:*6.5 650-201707218VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707219:*:*:*:*:*:*6.5 650-201707219VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707220:*:*:*:*:*:*6.5 650-201707220VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201707221:*:*:*:*:*:*6.5 650-201707221VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201710001:*:*:*:*:*:*6.5 650-201710001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201712001:*:*:*:*:*:*6.5 650-201712001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201803001:*:*:*:*:*:*6.5 650-201803001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201806001:*:*:*:*:*:*6.5 650-201806001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201808001:*:*:*:*:*:*6.5 650-201808001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201810001:*:*:*:*:*:*6.5 650-201810001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201810002:*:*:*:*:*:*6.5 650-201810002VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201811001:*:*:*:*:*:*6.5 650-201811001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201811002:*:*:*:*:*:*6.5 650-201811002VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201811301:*:*:*:*:*:*6.5 650-201811301VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201901001:*:*:*:*:*:*6.5 650-201901001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201903001:*:*:*:*:*:*6.5 650-201903001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.5:650-201905001:*:*:*:*:*:*6.5 650-201905001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:-:*:*:*:*:*:*6.7VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201806001:*:*:*:*:*:*6.7 670-201806001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201807001:*:*:*:*:*:*6.7 670-201807001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201808001:*:*:*:*:*:*6.7 670-201808001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810001:*:*:*:*:*:*6.7 670-201810001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810101:*:*:*:*:*:*6.7 670-201810101VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810102:*:*:*:*:*:*6.7 670-201810102VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810103:*:*:*:*:*:*6.7 670-201810103VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810201:*:*:*:*:*:*6.7 670-201810201VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810202:*:*:*:*:*:*6.7 670-201810202VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810203:*:*:*:*:*:*6.7 670-201810203VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810204:*:*:*:*:*:*6.7 670-201810204VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810205:*:*:*:*:*:*6.7 670-201810205VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810206:*:*:*:*:*:*6.7 670-201810206VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810207:*:*:*:*:*:*6.7 670-201810207VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810208:*:*:*:*:*:*6.7 670-201810208VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810209:*:*:*:*:*:*6.7 670-201810209VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810210:*:*:*:*:*:*6.7 670-201810210VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810211:*:*:*:*:*:*6.7 670-201810211VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810212:*:*:*:*:*:*6.7 670-201810212VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810213:*:*:*:*:*:*6.7 670-201810213VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810214:*:*:*:*:*:*6.7 670-201810214VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810215:*:*:*:*:*:*6.7 670-201810215VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810216:*:*:*:*:*:*6.7 670-201810216VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810217:*:*:*:*:*:*6.7 670-201810217VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810218:*:*:*:*:*:*6.7 670-201810218VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810219:*:*:*:*:*:*6.7 670-201810219VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810220:*:*:*:*:*:*6.7 670-201810220VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810221:*:*:*:*:*:*6.7 670-201810221VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810222:*:*:*:*:*:*6.7 670-201810222VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810223:*:*:*:*:*:*6.7 670-201810223VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810224:*:*:*:*:*:*6.7 670-201810224VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810225:*:*:*:*:*:*6.7 670-201810225VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810226:*:*:*:*:*:*6.7 670-201810226VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810227:*:*:*:*:*:*6.7 670-201810227VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810228:*:*:*:*:*:*6.7 670-201810228VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810229:*:*:*:*:*:*6.7 670-201810229VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810230:*:*:*:*:*:*6.7 670-201810230VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810231:*:*:*:*:*:*6.7 670-201810231VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810232:*:*:*:*:*:*6.7 670-201810232VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810233:*:*:*:*:*:*6.7 670-201810233VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201810234:*:*:*:*:*:*6.7 670-201810234VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201811001:*:*:*:*:*:*6.7 670-201811001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201901001:*:*:*:*:*:*6.7 670-201901001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201901401:*:*:*:*:*:*6.7 670-201901401VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201901402:*:*:*:*:*:*6.7 670-201901402VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201901403:*:*:*:*:*:*6.7 670-201901403VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201903001:*:*:*:*:*:*6.7 670-201903001VulnerableVMware
cpe:2.3:o:vmware:esxi:6.7:670-201904001:*:*:*:*:*:*6.7 670-201904001VulnerableVMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707103:*:*:*:*:*:* Versions 6.5 650-201707103 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707201:*:*:*:*:*:* Versions 6.5 650-201707201 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707202:*:*:*:*:*:* Versions 6.5 650-201707202 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707203:*:*:*:*:*:* Versions 6.5 650-201707203 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707204:*:*:*:*:*:* Versions 6.5 650-201707204 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707205:*:*:*:*:*:* Versions 6.5 650-201707205 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707206:*:*:*:*:*:* Versions 6.5 650-201707206 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707207:*:*:*:*:*:* Versions 6.5 650-201707207 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707208:*:*:*:*:*:* Versions 6.5 650-201707208 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707209:*:*:*:*:*:* Versions 6.5 650-201707209 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707210:*:*:*:*:*:* Versions 6.5 650-201707210 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707211:*:*:*:*:*:* Versions 6.5 650-201707211 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707212:*:*:*:*:*:* Versions 6.5 650-201707212 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707213:*:*:*:*:*:* Versions 6.5 650-201707213 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707214:*:*:*:*:*:* Versions 6.5 650-201707214 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707215:*:*:*:*:*:* Versions 6.5 650-201707215 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707216:*:*:*:*:*:* Versions 6.5 650-201707216 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707217:*:*:*:*:*:* Versions 6.5 650-201707217 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707218:*:*:*:*:*:* Versions 6.5 650-201707218 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707219:*:*:*:*:*:* Versions 6.5 650-201707219 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707220:*:*:*:*:*:* Versions 6.5 650-201707220 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201707221:*:*:*:*:*:* Versions 6.5 650-201707221 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201710001:*:*:*:*:*:* Versions 6.5 650-201710001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201712001:*:*:*:*:*:* Versions 6.5 650-201712001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201803001:*:*:*:*:*:* Versions 6.5 650-201803001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201806001:*:*:*:*:*:* Versions 6.5 650-201806001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201808001:*:*:*:*:*:* Versions 6.5 650-201808001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201810001:*:*:*:*:*:* Versions 6.5 650-201810001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201810002:*:*:*:*:*:* Versions 6.5 650-201810002 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201811001:*:*:*:*:*:* Versions 6.5 650-201811001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201811002:*:*:*:*:*:* Versions 6.5 650-201811002 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201811301:*:*:*:*:*:* Versions 6.5 650-201811301 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201901001:*:*:*:*:*:* Versions 6.5 650-201901001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201903001:*:*:*:*:*:* Versions 6.5 650-201903001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.5:650-201905001:*:*:*:*:*:* Versions 6.5 650-201905001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:-:*:*:*:*:*:* Versions 6.7 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201806001:*:*:*:*:*:* Versions 6.7 670-201806001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201807001:*:*:*:*:*:* Versions 6.7 670-201807001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201808001:*:*:*:*:*:* Versions 6.7 670-201808001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810001:*:*:*:*:*:* Versions 6.7 670-201810001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810101:*:*:*:*:*:* Versions 6.7 670-201810101 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810102:*:*:*:*:*:* Versions 6.7 670-201810102 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810103:*:*:*:*:*:* Versions 6.7 670-201810103 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810201:*:*:*:*:*:* Versions 6.7 670-201810201 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810202:*:*:*:*:*:* Versions 6.7 670-201810202 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810203:*:*:*:*:*:* Versions 6.7 670-201810203 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810204:*:*:*:*:*:* Versions 6.7 670-201810204 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810205:*:*:*:*:*:* Versions 6.7 670-201810205 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810206:*:*:*:*:*:* Versions 6.7 670-201810206 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810207:*:*:*:*:*:* Versions 6.7 670-201810207 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810208:*:*:*:*:*:* Versions 6.7 670-201810208 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810209:*:*:*:*:*:* Versions 6.7 670-201810209 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810210:*:*:*:*:*:* Versions 6.7 670-201810210 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810211:*:*:*:*:*:* Versions 6.7 670-201810211 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810212:*:*:*:*:*:* Versions 6.7 670-201810212 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810213:*:*:*:*:*:* Versions 6.7 670-201810213 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810214:*:*:*:*:*:* Versions 6.7 670-201810214 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810215:*:*:*:*:*:* Versions 6.7 670-201810215 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810216:*:*:*:*:*:* Versions 6.7 670-201810216 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810217:*:*:*:*:*:* Versions 6.7 670-201810217 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810218:*:*:*:*:*:* Versions 6.7 670-201810218 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810219:*:*:*:*:*:* Versions 6.7 670-201810219 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810220:*:*:*:*:*:* Versions 6.7 670-201810220 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810221:*:*:*:*:*:* Versions 6.7 670-201810221 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810222:*:*:*:*:*:* Versions 6.7 670-201810222 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810223:*:*:*:*:*:* Versions 6.7 670-201810223 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810224:*:*:*:*:*:* Versions 6.7 670-201810224 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810225:*:*:*:*:*:* Versions 6.7 670-201810225 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810226:*:*:*:*:*:* Versions 6.7 670-201810226 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810227:*:*:*:*:*:* Versions 6.7 670-201810227 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810228:*:*:*:*:*:* Versions 6.7 670-201810228 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810229:*:*:*:*:*:* Versions 6.7 670-201810229 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810230:*:*:*:*:*:* Versions 6.7 670-201810230 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810231:*:*:*:*:*:* Versions 6.7 670-201810231 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810232:*:*:*:*:*:* Versions 6.7 670-201810232 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810233:*:*:*:*:*:* Versions 6.7 670-201810233 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201810234:*:*:*:*:*:* Versions 6.7 670-201810234 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201811001:*:*:*:*:*:* Versions 6.7 670-201811001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201901001:*:*:*:*:*:* Versions 6.7 670-201901001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201901401:*:*:*:*:*:* Versions 6.7 670-201901401 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201901402:*:*:*:*:*:* Versions 6.7 670-201901402 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201901403:*:*:*:*:*:* Versions 6.7 670-201901403 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201903001:*:*:*:*:*:* Versions 6.7 670-201903001 Vulnerable ·VMware
  • cpe:2.3:o:vmware:esxi:6.7:670-201904001:*:*:*:*:*:* Versions 6.7 670-201904001 Vulnerable ·VMware

Remediation

  • Fix · CNA Workstation (VMware) Fixed in 15.0.2
  • Fix · CNA Fusion (VMware) Fixed in 11.0.2

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-3971
  2. 2026-10-03 Alias added: GHSA-5vvr-23q8-x3qg

References

Advisory 1

  • TI-2024-26040 Privilege escalation in VMware vCenter Server KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-26039 Heap-overflow in VMware vCenter Server KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-24610 Out-of-bounds write in VMware vCenter Server KEVCVSS 3.1CRITICAL 9.8
  • TI-2022-07131 Code injection in VMware Workspace ONE Access and Identity Manager KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-05049 Path traversal in VMware vCenter Server, VMware Cloud Foundation KEVCVSS 3.1CRITICAL 9.8
  • TI-2021-05029 Improper input validation in VMware vCenter Server and VMware Cloud Foundation KEVCVSS 3.1CRITICAL 9.8
See all 134 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences