Critical severity · published Jun 7, 2023
CVE-2023-20887
Vmware Aria Operations for Networks Command Injection Vulnerability
In wildKEV
9.8
CVSS
98.3%
EPSS
Yes
On KEV
Description
Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be able to perform a command injection attack resulting in remote code execution.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)98.3% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Jun 22, 2023
Federal remediation dueJul 13, 2023
Ransomware campaign useNot known
Affected products
Which versions
AO
Aria Operations for Networks (Formerly vRealize Network Insight) ·
Aria Operations for Networks (Formerly vRealize Network Insight) 6.x · source: vendor
AO
Aria Operations For Networks · Vmware
6.2.0 through 6.10.0 · source: NVD, KEV
Affected product
AO
Aria Operations for Networks (Formerly vRealize Network Insight)
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-20887
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-20887
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
www.vmware.com
https://www.vmware.com/security/advisories/VMSA-2023-0012.html
packetstormsecurity.com
http://packetstormsecurity.com/files/173761/VMWare-Aria-Operations-For-Networks-Remote-Command-Execution.html