CVE-2020-4005

vmware cloud foundation, vmware esxi

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2020-4005

Katalog CVE

CVSS 7.8 · High EPSS 0,39%

Kerentanan pada vmware cloud foundation, vmware esxi. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG) contains a privilege-escalation vulnerability that exists in the way certain system calls are being managed. A malicious actor with privileges within the VMX process only, may escalate their privileges on the affected system. Successful exploitation of this issue is only possible when chained with another vulnerability (e.g. CVE-2020-4004)

Rincian

Terbit di NVD
20 November 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
EPSS (30 hari)
0,39% peluang dieksploitasi; lebih tinggi dari 30,8% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
vmware cloud foundation Versi 3.0 hingga sebelum 3.10.1.2
vmware cloud foundation Versi 4.0 hingga sebelum 4.1.0.1
vmware esxi Versi 6.5
vmware esxi Versi 6.5 650-201701001
vmware esxi Versi 6.5 650-201703001
vmware esxi Versi 6.5 650-201703002
vmware esxi Versi 6.5 650-201704001
vmware esxi Versi 6.5 650-201707101
vmware esxi Versi 6.5 650-201707102
vmware esxi Versi 6.5 650-201707103
vmware esxi Versi 6.5 650-201707201
vmware esxi Versi 6.5 650-201707202
vmware esxi Versi 6.5 650-201707203
vmware esxi Versi 6.5 650-201707204
vmware esxi Versi 6.5 650-201707205
vmware esxi Versi 6.5 650-201707206
vmware esxi Versi 6.5 650-201707207
vmware esxi Versi 6.5 650-201707208
vmware esxi Versi 6.5 650-201707209
vmware esxi Versi 6.5 650-201707210
vmware esxi Versi 6.5 650-201707211
vmware esxi Versi 6.5 650-201707212
vmware esxi Versi 6.5 650-201707213
vmware esxi Versi 6.5 650-201707214
vmware esxi Versi 6.5 650-201707215
vmware esxi Versi 6.5 650-201707216
vmware esxi Versi 6.5 650-201707217
vmware esxi Versi 6.5 650-201707218
vmware esxi Versi 6.5 650-201707219
vmware esxi Versi 6.5 650-201707220
vmware esxi Versi 6.5 650-201707221
vmware esxi Versi 6.5 650-201710001
vmware esxi Versi 6.5 650-201712001
vmware esxi Versi 6.5 650-201803001
vmware esxi Versi 6.5 650-201806001
vmware esxi Versi 6.5 650-201808001
vmware esxi Versi 6.5 650-201810001
vmware esxi Versi 6.5 650-201810002
vmware esxi Versi 6.5 650-201811001
vmware esxi Versi 6.5 650-201811002
vmware esxi Versi 6.5 650-201811301
vmware esxi Versi 6.5 650-201901001
vmware esxi Versi 6.5 650-201903001
vmware esxi Versi 6.5 650-201905001
vmware esxi Versi 6.5 650-201908001
vmware esxi Versi 6.5 650-201910001
vmware esxi Versi 6.5 650-20191004001
vmware esxi Versi 6.5 650-201911001
vmware esxi Versi 6.5 650-201911401
vmware esxi Versi 6.5 650-201911402
vmware esxi Versi 6.5 650-201912001
vmware esxi Versi 6.5 650-201912002
vmware esxi Versi 6.5 650-201912101
vmware esxi Versi 6.5 650-201912102
vmware esxi Versi 6.5 650-201912103
vmware esxi Versi 6.5 650-201912104
vmware esxi Versi 6.5 650-201912301
vmware esxi Versi 6.5 650-201912401
vmware esxi Versi 6.5 650-201912402
vmware esxi Versi 6.5 650-201912403

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 181 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.