HynekPetrak/CVE-2019-5544_CVE-2020-3992

PoC

Python / scapy module implementing SRVLOC/SLP protocol and scans for enabled OpenSLP services.

view exploit source poc_in_githubauthor HynekPetrakpublished 2020-12-01catalog poc_in_github
01

exploited CVEs (2)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2020-3992UScritical9.8OT criticalKEV
OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a use-after-free issue. A malicious actor…
CVE-2019-5544UScritical9.8OT criticalKEV
OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maxi…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan