Vulnerability Details CVE-2023-20890
Aria Operations for Networks contains an arbitrary file write vulnerability. An authenticated malicious actor with administrative access to VMware Aria Operations for Networks can write files to arbitrary locations resulting in remote code execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 73.2%
CVSS Severity
CVSS v3 Score 7.2
References
Products affected by CVE-2023-20890
-
cpe:2.3:a:vmware:aria_operations_for_networks:6.10.0
-
cpe:2.3:a:vmware:aria_operations_for_networks:6.2.0
-
cpe:2.3:a:vmware:aria_operations_for_networks:6.3.0
-
cpe:2.3:a:vmware:aria_operations_for_networks:6.4.0
-
cpe:2.3:a:vmware:aria_operations_for_networks:6.5.0
-
cpe:2.3:a:vmware:aria_operations_for_networks:6.6.0
-
cpe:2.3:a:vmware:aria_operations_for_networks:6.7.0
-
cpe:2.3:a:vmware:aria_operations_for_networks:6.8.0
-
cpe:2.3:a:vmware:aria_operations_for_networks:6.9.0