Severity
CRITICAL
CVSS
9.8
EPSS
0.90384
Risk score
56.63
CISA KEV
Yes
PoC
Yes
Published
2020-04-10
Modified
2025-10-21
First seen
2026-08-07
Aliases
EUVD-2020-25217, GHSA-RQPW-V3G2-QCCX
Products
VMware:vCenter Server, n/a:VMware vCenter Server vCenter Server 6.7 (embedded or external PSC) prior to 6.7u3f is affected by CVE-2020-3952 if it was upgraded from a previous release line such as 6.0 or 6.5. Clean installations of vCenter Server 6.7 (embedded or external PSC) are not affected.
Sources