High severity7.2NVD Advisory· Published Mar 15, 2023· Updated Jun 17, 2026

CVE-2023-28460

Description

A command injection vulnerability was discovered in Array Networks APV products. A remote attacker can send a crafted packet after logging into the affected appliance as an administrator, resulting in arbitrary shell code execution. This is fixed in 8.6.1.262 or newer and 10.4.2.93 or newer.

Affected products

Array Networks/APV productsdescription
Array Networks/APVllm-fuzzy
Range: before 8.6.1.262 and before 10.4.2.93

Patches

Vulnerability mechanics

References

support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_Command_Injection_Vulnerabilities_APV_ID-133258.pdfnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000