Command Injection Vulnerability in Aria Operations for Networks (CVE-2023-20887) Exploited in the Wild

What is VMware Aria Operations for Networks?



VMware Aria Operations for Networks, formerly known as vRealize Network Insight, a network monitoring tool that monitors and analyzes networks across multiple clouds.






What is the Attack?

CVE-2023-20887 is a command injection vulnerability in Aria Operations for Networks that allows an unauthenticated attacker with network access to achieve remote code execution.
The vulnerability has a CVSS base score of 9.8 and is rated critical by VMware.




Why is this Significant?



This is significant …

a network aria aria operations for networks attack clouds command command injection cve cve-2023-20887 exploited injection insight monitoring monitoring tool network network monitoring networks operations tool vmware vrealize vulnerability what is