VulnerabilitycriticalExploited in the wild

CISA Urges Agencies to Patch Critical "Array Networks" Flaw Amid Active Attacks

The Hacker Newsby @TheHackersNewsNov 27, 2024 · 04:06 UTC (Nov 27, 2024)2 min read3 · 1 read

Read at thehackernews.com

Analyze CVE-2023-28461 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-28461 CVE-2023-45727 CVE-2023-27997

Tags: cve-2023-28461 cve-2023-45727 cve-2023-27997 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-27997	Pre-Auth Heap Buffer Overflow RCE in Fortinet FortiOS/FortiProxy SSL-VPN	9.8	87%	KEVRansomware	Jun 13, 2023 KEV Jun 13, 2023
CVE-2023-28461	Unauthenticated RCE in Array Networks AG/vxAG SSL VPN Gateways (ArrayOS)	9.8	68%	KEVRansomware	Mar 15, 2023 KEV Nov 25, 2024
CVE-2023-45727	Unauthenticated XXE File-Read in North Grid Proself (CVE-2023-45727)	7.5	5%	KEV	Oct 18, 2023 KEV Dec 3, 2024

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Nov 26, 2024 Vulnerability / Network Security The U. S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a now-patched critical security flaw impacting Array Networks AG and vxAG secure access gateways to its Known Exploited Vulnerabilities ( KEV ) catalog following reports of active exploitation in the wild.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.