Vmware Aria Operations for Networks Command Injection Vulnerability
VMware · Aria Operations for Networks
Date added (CISA)
2023-06-22
Remediation due
2023-07-13
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
VMware Aria Operations for Networks (formerly vRealize Network Insight) contains a command injection vulnerability that allows a malicious actor with network access to perform an attack resulting in remote code execution.