Detections
Analytics
CVE-2023-20887
critical
Description
Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be able to perform a command injection attack resulting in remote code execution.
From the Tenable Blog
CVE-2023-20887: VMware Aria Operations for Networks Command Injection
Published: 2023-06-14
VMware issues advisory to address three flaws in its VMware Aria Operations for Networks solution, including a critical command injection flaw assigned a CVSSv3 score of 9.8.
References
https://thehackernews.com/2023/06/alert-hackers-exploiting-critical.html
https://www.tenable.com/blog/cve-2023-20887-vmware-aria-operations-for-networks-command-injection
https://www.vmware.com/security/advisories/VMSA-2023-0012.html