V
Scaner-VS
ENRU
HomeCatalogSourcesCWECAPECATT&CKMitigationsProductsVendorsDocs
←Back to catalog
BDU:2020-03234
BDU
High

Уязвимость контроллера USB 3.0 (xHCI) гипервизоров VMware ESXi, VMware Workstation и VMware Fusion связана с записью данных за границами бу…

CVSS
8.2
High
EPSS
0.00
p0
Published
2020-01-01
Updated
2020-01-01
Description

Уязвимость контроллера USB 3.0 (xHCI) гипервизоров VMware ESXi, VMware Workstation и VMware Fusion связана с записью данных за границами буфера. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании или выполнить произвольный код

Affected products
Broadcom inc. Vmware cloud foundationBroadcom inc. Vmware cloud foundationBroadcom inc. Vmware esxiBroadcom inc. Vmware esxiBroadcom inc. Vmware esxiBroadcom inc. Vmware fusionBroadcom inc. Vmware workstation
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Timeline
2020-01-01
Published
2020-01-01
Updated
CVSS 3.1 breakdown
Attack Vector
AV: L
Local (L)
Attack Complexity
AC: L
Low (L)
Privileges Required
PR: H
High (H)
User Interaction
UI: N
None (N)
Scope
S: C
Changed (C)
Confidentiality Impact
C: H
High (H)
Integrity Impact
I: H
High (H)
Availability Impact
A: H
High (H)
Exploit indicators
EPSS
0.000 · p0
Known exploited (KEV)
No
Known exploits — Сканер-ВС
No Сканер-ВС checks registered for this vulnerability yet.
Affected products
Broadcom
Vmware Cloud FoundationVmware WorkstationVmware FusionVmware Esxi
ProductVendorStatus
vmware cloud foundationbroadcom inc.Tracked
vmware cloud foundationbroadcom inc.Tracked
vmware esxibroadcom inc.Tracked
vmware esxibroadcom inc.Tracked
vmware esxibroadcom inc.Tracked
vmware fusionbroadcom inc.Tracked
vmware workstationbroadcom inc.Tracked
Source databases
BDU
Related vulnerabilities
CVE-2020-3968