Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitycritical

Critical RCE flaw impacts VMware Aria Operations Networks

Security Affairsby @securityaffairs ()1 min read3
Read at securityaffairs.com
Analyze CVE-2023-34039 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2023-34039CVE-2023-20890
Tags
cve-2023-34039cve-2023-20890vulnerability

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2023-34039
+1 related CVE
CVE-2023-20890
Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation
9.8
group max
67%PoC

From the original article

1 min read at securityaffairs.com

VMware fixed two security flaws in Aria Operations for Networks that could be exploited to bypass authentication and gain remote code execution. VMware has released security updates to address two vulnerabilities in Aria Operations for Networks, respectively tracked as CVE-2023-34039 (CVSS score: 9. 8) and CVE-2023-20890 (CVSS score: 7.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.