Every CVESearch/Get API key

CVE-2023-20887

Aria Operations for Networks contains a command injection vulnerability. A malicious actor with...

9.8 CriticalIn KEVPublic exploit

CVE-2023-20887 is a critical vulnerability (CVSS 9.8) in Vmware Aria Operations For Networks, published June 7, 2023. CISA lists it as known to be exploited, since June 22, 2023. EUVD reports exploitation since June 22, 2023. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 98.3%, the 99th percentile. No source names a fixed version.

What does this mean?
Severity
9.8 CriticalCVSS 3.1, NVD
Exploit chance
98.3%EPSS, 99th percentile
Exploitation
ExploitedCISA KEV,
Fixed in
No fix listedNo source names one

Description

Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be able to perform a command injection attack resulting in remote code execution.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

98.3%Up 98.2 points since Jun 8, 2023
90%50%10%1%

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
MetasploitVMWare Aria Operations for Networks (vRealize Network Insight) pre-authenticated RCE2023-06-07
PoC in GitHubsinsinology/CVE-2023-208872023-06-13
PoC in GitHubmiko550/CVE-2023-208872023-06-14
PoC in GitHubMalwareman007/CVE-2023-208872023-09-25
NucleiVMware VRealize Network Insight - Remote Code Execution

What each source reports

NVD Score used9.8

Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be able to perform a command injection attack resulting in remote code execution.

Record
CVE-2023-20887
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-77
Updated
2026-11-02
CVE List9.8

Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be able to perform a command injection attack resulting in remote code execution.

Record
CVE-2023-20887
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-77
Updated
2026-11-02
EUVDEUVD-2023-250589.8

Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be able to perform a command injection attack resulting in remote code execution.

Record
EUVD-2023-25058
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-8vx8-r5j3-f2vf9.8

Aria Operations for Networks contains a command injection vulnerability. A malicious actor with...

Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be able to perform a command injection attack resulting in remote code execution.

Record
GHSA-8vx8-r5j3-f2vf
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-77
Updated
2026-11-02
CISA KEVNo score

Vmware Aria Operations for Networks Command Injection Vulnerability

VMware Aria Operations for Networks (formerly vRealize Network Insight) contains a command injection vulnerability that allows a malicious actor with network access to perform an attack resulting in remote code execution.

Record
CVE-2023-20887
Weakness
CWE-77
Updated
2026-11-02

History

History
RecordedChangedSources
exploitation, exploits
first indexedCVE List, EUVD, GitHub Advisories, CISA KEV, Metasploit, Nuclei, NVD, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open