Critical severity9.8CISA KEVNVD Advisory· Published Jun 7, 2023· Updated Jun 17, 2026
CVE-2023-20887
CVE-2023-20887
Description
Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be able to perform a command injection attack resulting in remote code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:vmware:aria_operations_for_networks:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:vmware:aria_operations_for_networks:*:*:*:*:*:*:*:*range: >=6.2.0,<=6.10.0
- (no CPE)
Patches
Vulnerability mechanics
References
3- www.vmware.com/security/advisories/VMSA-2023-0012.htmlnvdPatchVendor Advisory
- packetstormsecurity.com/files/173761/VMWare-Aria-Operations-For-Networks-Remote-Command-Execution.htmlnvdExploitThird Party AdvisoryVDB Entry
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.