Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| VMware | VMware ESXi | affected |
|
||||||||||||
| VMware | Workstation | affected |
|
||||||||||||
| VMware | Fusion | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2020-25229 | VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain an information leak in the EHCI USB controller. A malicious actor with local access to a virtual machine may be able to read privileged information contained in the hypervisor's memory. Additional conditions beyond the attacker's control need to be present for exploitation to be possible. |
No CVSS v4.0
Attack Vector Local
Attack Complexity High
Privileges Required Low
Scope Unchanged
Confidentiality Impact High
Integrity Impact None
Availability Impact None
User Interaction None
No CVSS v3.0
Access Vector Local
Access Complexity Medium
Authentication None
Confidentiality Impact Partial
Integrity Impact None
Availability Impact None
This CVE is not in the KEV list.
The EPSS score is 0.00114.
Key SSVC decision points have not yet been added.
No history.
Status: PUBLISHED
Assigner: vmware
Published:
Updated: 2024-08-04T07:52:20.578Z
Reserved: 2019-12-30T00:00:00.000Z
Link: CVE-2020-3964
No data.
Status : Modified
Published: 2020-06-25T15:15:11.117
Modified: 2024-11-21T05:32:04.310
Link: CVE-2020-3964
No data.
OpenCVE Enrichment
No data.
EUVD