CVE-2023-20887

🔥 Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2023-06-07

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be able to perform a command injection attack resulting in remote code execution.

Affected Platforms (CPE)

📦

Vmware

Aria Operations For Networks

>= 6.2.0 and <= 6.10.0

References & Advisories

🔗 http://packetstormsecurity.com/files/173761/VMWare-Aria-Operations-For-Networks-Remote-Command-Execution.html

🔗 https://www.vmware.com/security/advisories/VMSA-2023-0012.html

🔗 http://packetstormsecurity.com/files/173761/VMWare-Aria-Operations-For-Networks-Remote-Command-Execution.html

🔗 https://www.vmware.com/security/advisories/VMSA-2023-0012.html

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-20887

CVE-2023-20887

Vulnerability Description

Affected Platforms (CPE)

Aria Operations For Networks

References & Advisories

関連するセキュリティ記事

グローバル・サイバーインテリジェンス・ダイジェスト：2026年7月21日

関連する脆弱性情報