vulnerability
VMSA-2020-0026: VMX elevation-of-privilege vulnerability (CVE-2020-4005)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:L/AC:L/Au:N/C:C/I:C/A:C) | Nov 20, 2020 | Nov 24, 2020 | Feb 11, 2025 |
Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Published
Nov 20, 2020
Added
Nov 24, 2020
Modified
Feb 11, 2025
Description
VMware ESXi (7.0 before ESXi70U1b-17168206, 6.7 before ESXi670-202011101-SG, 6.5 before ESXi650-202011301-SG) contains a privilege-escalation vulnerability that exists in the way certain system calls are being managed. A malicious actor with privileges within the VMX process only, may escalate their privileges on the affected system. Successful exploitation of this issue is only possible when chained with another vulnerability (e.g. CVE-2020-4004)
Solution(s)
vmware-esxi65-upgrade-17167537vmware-esxi67-upgrade-17167734vmware-esxi700-upgrade-17168206
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.