CVE-2023-28461

Severity

critical · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2024-11-25

Reference

https://nvd.nist.gov/vuln/detail/CVE-2023-28461

⌖ exploited in the wild shame 80/100 ransomwareexploited-in-wild

Array Networks AG and vxAG ArrayOS contain a missing authentication for critical function vulnerability that allows an attacker to read local files and execute code on the SSL VPN gateway.

Players implicated

Array Networks · vendor AG/vxAG ArrayOS · product

Description

Array Networks AG and vxAG ArrayOS contain a missing authentication for critical function vulnerability that allows an attacker to read local files and execute code on the SSL VPN gateway.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.