CVE-2023-20887

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

https://www.vmware.com/security/advisories/VMSA-2023-0012.html; https://nvd.nist.gov/vuln/detail/CVE-2023-20887

Remediation deadline: July 13, 2023

Description

VMware Aria Operations for Networks (formerly vRealize Network Insight) contains a command injection vulnerability that allows a malicious actor with network access to perform an attack resulting in remote code execution.

Timeline

Published:June 22nd, 2023 12:00 AM

Last modified:June 22nd, 2023 12:00 AM

Added to KEV:June 22nd, 2023

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

VMware

Products

Aria Operations for Networks

Weaknesses (CWE)

CWE-77

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute