Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability
Array Networks · AG/vxAG ArrayOS
Date added (CISA)
2024-11-25
Remediation due
2024-12-16
Known ransomware use
Yes
Remediation priority
P1 — known ransomware use · past CISA due date
Description
Array Networks AG and vxAG ArrayOS contain a missing authentication for critical function vulnerability that allows an attacker to read local files and execute code on the SSL VPN gateway.