CVE-2020-3947

VMware Workstation (15.x before 15.5.2) and Fusion (11.x before 11.5.2) contain a use-after vulnerability in vmnetdhcp. Successful exploitation of this issue may lead to code execution on the host from the guest or may allow attackers to create a denial-of-service condition of the vmnetdhcp service running on the host machine.

Affected

VMware · Workstation · Fusion

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CVSS v2.0 NVD

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.61% chance of exploitation in the next 30 days, 48th percentile

Published

2020-03-16

Updated

2024-08-04

Proof-of-concept exploits (3)

• BLACKHAT-SSG/Vmware-Exploitation3★ · 2022-02-16
• PwnAwan/Vmware-Exploitation3★ · 2022-02-16
• xairy/vmware-exploitation1491★ · 2024-09-04

Security advisories

• https://www.vmware.com/security/advisories/VMSA-2020-0004.html

References

• CVE Record
• NVD entry

Related

• CVE-2017-4901
• CVE-2018-6973
• CVE-2017-3881
• CVE-2022-31705
• CVE-2023-20869