Critical Vulnerability Alert: VMware Aria Operations Networks at Risk from Remote Attacks
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-20887 | Unauthenticated Command Injection RCE in VMware Aria Operations for Networks | 9.8 | 98% | KEVPoC | KEV |
CVE-2023-34039+1 related CVE | Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation | 9.8 group max | 67% | PoC |
From the original article
1 min read at thehackernews.com
Ravie Lakshmanan Aug 30, 2023 Vulnerability / Network Security VMware has released software updates to correct two security vulnerabilities in Aria Operations for Networks that could be potentially exploited to bypass authentication and gain remote code execution. The most severe of the flaws is CVE-2023-34039 (CVSS score: 9.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.