CVE-2020-3992: VMware ESXi OpenSLP Use-After-Free Vulnerability

VMware ESXi contains a use-after-free vulnerability in the OpenSLP service, which listens on port 427. An attacker with network access to this port can exploit the flaw to achieve remote code execution. The vulnerability is identified as CWE-416 (Use After Free). It has been observed in active exploitation scenarios, including ransomware attacks.

Successful exploitation allows remote code execution on VMware ESXi hosts via the OpenSLP service, potentially leading to full compromise of the affected system. The vulnerability is exploitable by attackers with access to the management network and port 427, enabling them to execute arbitrary code remotely.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to port 427 on the management network to trusted entities only to reduce exposure.