VMware Aria Operations for Networks vulnerability exploited in the wild (CVE-2023-20887)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-20887 | Unauthenticated Command Injection RCE in VMware Aria Operations for Networks | 9.8 | 98% | KEVPoC | KEV |
CVE-2023-20888+1 related CVE | Aria Operations for Networks contains an authenticated deserialization vulnerability | 8.8 group max | 82% |
From the original article
1 min read at helpnetsecurity.com
CVE-2023-20887, a pre-authentication command injection vulnerability in VMware Aria Operations for Networks (formerly vRealize Network Insight), has been spotted being exploited in the wild. There are no workarounds to mitigate the risk of exploitation – enterprise admins are advised to upgrade their deployments with patches.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.