CVE-2023-20890

—

CVSS 3.1

7.2 high

EPSS

20%p97

Published

Aug 29, 2023 (Aug 29, 2023)

Modified

Jun 17, 2026

Description

Aria Operations for Networks contains an arbitrary file write vulnerability. An authenticated malicious actor with administrative access to VMware Aria Operations for Networks can write files to arbitrary locations resulting in remote code execution.

Vendors: vmware
Products: aria operations for networks
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (20.2%)

In the news6 stories

PoC Exploit Released for Critical VMware Aria's SSH Auth Bypass Vulnerability

The Hacker NewsSep 4, 04:00 UTC · Sep 4, 2023Exploit / PoC CVE-2023-34039 CVE-2023-20890 CVE-2023-20900

60

VMware fixes critical vulnerability in Aria Operations for Networks (CVE-2023-34039)

Help Net SecuritySep 3, 17:07 UTC · Sep 3, 2023Vulnerability in the wildCVE-2023-34039 CVE-2023-20890 CVE-2023-20887

60

PoC exploit code released for CVE-2023-34039 bug in VMware Aria Operations for Networks

Security AffairsSep 3, 16:14 UTC · Sep 3, 2023Exploit / PoC CVE-2023-34039 CVE-2023-20890

60

Week in review: 11 search engines for cybersecurity research, PoC for RCE in Juniper firewall released

Help Net SecuritySep 3, 00:00 UTC · Sep 3, 2023Exploit / PoC CVE-2023-34039 CVE-2023-20890

60

Critical Vulnerability Alert: VMware Aria Operations Networks at Risk from Remote Attacks

The Hacker NewsAug 31, 13:34 UTC · Aug 31, 2023Vulnerability in the wildCVE-2023-34039 CVE-2023-20890 CVE-2023-20887

60

Critical RCE flaw impacts VMware Aria Operations Networks

Security AffairsAug 30, 10:41 UTC · Aug 30, 2023Vulnerability CVE-2023-34039 CVE-2023-20890

60