Vulnerabilitycritical

Urgent Security Updates: Cisco and VMware Address Critical Vulnerabilities

The Hacker Newsby @TheHackersNewsJun 8, 2023 · 05:18 UTC (Jun 8, 2023)2 min read1 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2023-20887 CVE-2023-20888 CVE-2023-20889 CVE-2023-20105 CVE-2023-20192 CVE-2023-33863 CVE-2023-33864 CVE-2023-33865

Tags: cve-2023-20887 cve-2023-20888 cve-2023-20889 cve-2023-20105 cve-2023-20192 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-20192 +1 related CVE CVE-2023-20105	Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated attacker with…	7.7 group max	<1%		Jun 28, 2023
CVE-2023-20887	Unauthenticated Command Injection RCE in VMware Aria Operations for Networks	9.8	98%	KEVPoC	Jun 7, 2023 KEV Jun 22, 2023
CVE-2023-20888 +1 related CVE CVE-2023-20889	Aria Operations for Networks contains an authenticated deserialization vulnerability	8.8 group max	82%		Jun 7, 2023
CVE-2023-33863 +2 related CVEs CVE-2023-33864 CVE-2023-33865	SerialiseValue in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow	9.8 group max	4%	PoC ×3	Jun 7, 2023

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Jun 08, 2023 Network Security / Vulnerability VMware has released security updates to fix a trio of flaws in Aria Operations for Networks that could result in information disclosure and remote code execution. The most critical of the three vulnerabilities is a command injection vulnerability tracked as CVE-2023-20887 (CVSS score: 9.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.