CVE-2023-38402 (aruba_virtual_intranet_access)

A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to overwrite arbitrary files as NT AUTHORITY\SYSTEM. A successful exploit could allow these malicious users to create a Denial-of-Service (DoS) condition affecting the Microsoft Windows operating System boot process.

access aruba authority boot client cve dos exploit files hpe hpe aruba malicious networking operating system process service system virtual vulnerability windows