VulnerabilitycriticalExploited in the wild

VMware fixes critical flaws in Aria Operations for Networks (CVE-2023-20887)

Help Net Securityby @helpnetsecurityJun 21, 2023 · 09:47 UTC (Jun 21, 2023)1 min read1

Read at helpnetsecurity.com

Analyze CVE-2023-20887 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-20887 CVE-2023-20888 CVE-2023-20889 CVE-2022-31702

Tags: cve-2023-20887 cve-2023-20888 cve-2023-20889 cve-2022-31702 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-31702	vRealize Network Insight (vRNI) contains a command injection vulnerability present in the vRNI REST API	9.8	2%		Dec 14, 2022
CVE-2023-20887	Unauthenticated Command Injection RCE in VMware Aria Operations for Networks	9.8	98%	KEVPoC	Jun 7, 2023 KEV Jun 22, 2023
CVE-2023-20888 +1 related CVE CVE-2023-20889	Aria Operations for Networks contains an authenticated deserialization vulnerability	8.8 group max	82%		Jun 7, 2023

From the original article

1 min read at helpnetsecurity.com

VMware has fixed two critical (CVE-2023-20887, CVE-2023-20888) and one important vulnerability (CVE-2023-20889) in Aria Operations for Networks (formerly vRealize Network Insight), its popular enterprise network monitoring tool.

Help Net Security

By @helpnetsecurity · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.