PT-2023-3036 · Vmware · Vmware Aria Operations For Networks

Publicado 2023-06-07 · Atualizado 2025-07-09 · CVE-2023-20887

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VMware Aria Operations for Networks versions (affected versions not specified)

Description The issue is related to a command injection vulnerability in VMware Aria Operations for Networks. This vulnerability can be exploited by a malicious actor with network access, potentially allowing them to perform a command injection attack and resulting in remote code execution. The vulnerability is being actively exploited in the wild.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

BDU:2023-03101

CVE-2023-20887

ZDI-23-840

Produtos afetados

Vmware Aria Operations For Networks

Referências · 43

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/vmware_vrni_rce_cve_2023_20887.rb · Exploit
• 🔥 https://github.com/sinsinology/CVE-2023-20887 · Exploit
• 🔥 https://github.com/Malwareman007/CVE-2023-20887 · Exploit
• 🔥 https://github.com/miko550/CVE-2023-20887 · Exploit
• 🔥 http://packetstormsecurity.com/files/173761/VMWare-Aria-Operations-For-Networks-Remote-Command-Execution.html · Exploit
• https://twitter.com/blackstormsecbr/status/1688960143285792778 · Publicação no Twitter
• https://twitter.com/clovernetics/status/1707727400014913806 · Publicação no Twitter
• https://t.me/ckure/12543 · Publicação no Telegram
• https://t.me/ptswarm/177 · Publicação no Telegram
• https://t.me/breachdetector/286962 · Publicação no Telegram
• https://t.me/isacarusec/6691 · Publicação no Telegram
• https://twitter.com/reverseame/status/1708083524945719300 · Publicação no Twitter
• https://t.me/thebugbountyhunter/7427 · Publicação no Telegram
• https://t.me/ralfhackerchannel/1344 · Publicação no Telegram
• https://twitter.com/JuniperNetworks/status/1719035889714905267 · Publicação no Twitter