CVE-2023-20890: high-severity vulnerability in Aria Operations for Networks
Published · Updated
26Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.2epss 20%
exploitation probability
20%top 3% of all CVEs
observed exploitation
nono source reports it
Aria Operations for Networks contains an arbitrary file write vulnerability. An authenticated malicious actor with administrative access to VMware Aria Operations for Networks can write files to arbitrary locations resulting in remote code execution.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · Aria Operations for Networks