CVE-2023-20888
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Jun 7, 2023
Updated: Jan 7, 2025
CWE ID 502
Summary
CVE-2023-20888 is a newly disclosed vulnerability affecting VMware Aria Operations for Networks. This issue involves an authenticated deserialization flaw that puts networks at risk. Malicious actors with valid 'member' role credentials and access to the affected system can exploit this vulnerability to execute remote code, potentially leading to severe security consequences. Organizations using Aria Operations for Networks are advised to apply the necessary patches or mitigations to prevent potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- VMware Aria Operations for Networks
Affected Vendors
- VMware Inc.