VulnerabilitycriticalExploited in the wild

VMware warns customers of exploit available for critical vRealize RCE flaw CVE-2023

Security Affairsby @securityaffairsJul 11, 2023 · 08:20 UTC (Jul 11, 2023)1 min read1

Read at securityaffairs.com

Analyze CVE-2023-20864 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-20864 CVE-2023-20865 CVE-2023-20887

Tags: cve-2023-20864 cve-2023-20865 cve-2023-20887 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-20864 +1 related CVE CVE-2023-20865	VMware Aria Operations for Logs contains a deserialization vulnerability	9.8 group max	70%		Apr 20, 2023
CVE-2023-20887	Unauthenticated Command Injection RCE in VMware Aria Operations for Networks	9.8	98%	KEVPoC	Jun 7, 2023 KEV Jun 22, 2023

From the original article

1 min read at securityaffairs.com

VMware warns customers of the public availability of an exploit code for the RCE vulnerability CVE-2023-20864 affecting vRealize. VMware warned customers of the availability of an exploit code for the critical RCE vulnerability CVE-2023-20864 in the VMware Aria Operations for Logs analysis tool (formerly vRealize Log Insight).

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.