CVE-2023-38402

Arbitrary File Overwrite in HPE Aruba Networking Virtual Intranet Access (VIA) Microsoft Windows Client

State: Published
Severity: 7.1 High
Published: Aug 15, 2023
Updated: Oct 3, 2024
Reserved: Jul 17, 2023

Description

A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to overwrite arbitrary files as NT AUTHORITY\SYSTEM. A successful exploit could allow these malicious users to create a Denial-of-Service (DoS) condition affecting the Microsoft Windows operating System boot process.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H	hpe

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
HPE Aruba Networking Virtual Intranet Access (VIA)Hewlett Packard Enterprise (HPE)	HPE Aruba Networking Virtual Intranet Access (VIA) client for Microsoft Windows through <=4.5.0Affected

References

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-011.txt

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.