Cybersecurity Alerts

VMware ESXi OpenSLP Use-After-Free Vulnerability

VMware ESXi OpenSLP contains a use-after-free vulnerability that allows an attacker residing in the management network with access to port 427 to perform remote code execution.

Required Action

Apply updates per vendor instructions.

Weakness Classification

CWE-416

References

• https://nvd.nist.gov/vuln/detail/CVE-2020-3992