CVE-2020-3993

published 2020-10-20

CVE-2020-3993: VMware NSX-T (3.x before 3.0.2, 2.5.x before 2.5.2.2.0) contains a security vulnerability that exists in the way it allows a KVM host to download and install…

medium 5.9 CVSS 3.1

AV N AC H PR N UI N S U C N I H A N

VMware NSX-T (3.x before 3.0.2, 2.5.x before 2.5.2.2.0) contains a security vulnerability that exists in the way it allows a KVM host to download and install packages from NSX manager. A malicious actor with MITM positioning may be able to exploit this issue to compromise the transport node.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
broadcom	vmware_nsx-t_data_center	—	—
broadcom	vmware_nsx-t_data_center	>= 2.5.0 < 2.5.2.2.0	2.5.2.2.0
broadcom	vmware_nsx-t_data_center	>= 3.0.0 < 3.0.2	3.0.2
vmware	cloud_foundation	>= 3.0 < 3.10.1.1	3.10.1.1
vmware	cloud_foundation	>= 4.0 < 4.1	4.1