CVE-2023-20887
KEVVmware Aria Operations for Networks Command Injection Vulnerability
View CVE record →- Vendor / Project
- VMware
- Product
- Aria Operations for Networks
- Date added
- Jun 22, 2023
- Due date
- Jul 13, 2023
- Known ransomware use
- Unknown
- CWEs
- CWE-77
Description
VMware Aria Operations for Networks (formerly vRealize Network Insight) contains a command injection vulnerability that allows a malicious actor with network access to perform an attack resulting in remote code execution.
Required action
Apply updates per vendor instructions.