Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
n/a VMware ESXi — VMware ESXi
AV AC PR UI S C I A CVSS EPSS %ile KEV
N L N N U H H H 9.8 .8302 99.6 YES
AFFECTED
Product Versions Fixed
VMware ESXi VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) – —
TIMELINE
Dec 30 Reserved by vmware
Nov 3 Added to CISA KEV, remediation due 2022-05-03
Nov 3 Published (CNA: vmware)
Description
OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a use-after-free issue. A malicious actor residing in the management network who has access to port 427 on an ESXi machine may be able to trigger a use-after-free in the OpenSLP service resulting in remote code execution.
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
|---|
| December 30, 2019 | Reserved | Reserved by vmware |
| November 3, 2021 | KEV ADDED | Added to CISA KEV, remediation due 2022-05-03 |
| November 3, 2021 | Published | Published (CNA: vmware) |
Affected
Affected products and packages — 1 row
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|
| n/a | VMware ESXi | — | VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) | — |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2020-3992 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.