CVE-2023-20887

Produto

VMware / Aria Operations for Networks

Vulnerabilidade

Vmware Aria Operations for Networks Command Injection Vulnerability

Adicionado ao KEV

22 de jun. de 2023

Corrigir até

13 de jul. de 2023

Uso conhecido em ransomware

Não

Descrição resumida

VMware Aria Operations for Networks (formerly vRealize Network Insight) contains a command injection vulnerability that allows a malicious actor with network access to perform an attack resulting in remote code execution.

Ação necessária

Apply updates per vendor instructions.

Notas

https://www.vmware.com/security/advisories/VMSA-2023-0012.html; https://nvd.nist.gov/vuln/detail/CVE-2023-20887