CVE-2023-38401

Local Privilege Escalation in HPE Aruba Networking Virtual Intranet Access (VIA) Microsoft Windows Client

State: Published
Severity: 7.8 High
Published: Aug 15, 2023
Updated: Nov 22, 2024
Reserved: Jul 17, 2023

Description

A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow local users to elevate privileges. Successful exploitation could allow execution of arbitrary code with NT AUTHORITY\SYSTEM privileges on the operating system.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	hpe

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
HPE Aruba Networking Virtual Intranet Access (VIA)Hewlett Packard Enterprise (HPE)	HPE Aruba Networking Virtual Intranet Access (VIA) client for Microsoft Windows through <=4.5.0Affected

References

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-011.txt

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.