H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Vulnerability

CVE-2023-28461

Array Networks AG and vxAG ArrayOS contain a missing authentication for critical function vulnerability that allows an attacker to read local files and execute code on the SSL VPN gateway.

Vulnerability
TypeVulnerability
External ID—
First seen2024-11-25
Last seen2024-11-25

Confidence

—

Array Networks AG and vxAG ArrayOS contain a missing authentication for critical function vulnerability that allows an attacker to read local files and execute code on the SSL VPN gateway.

Labels

exploitedkevransomware

CISA KEV context

Vendor / productArray Networks AG/vxAG ArrayOS
Added2024-11-25
Due date2024-12-16
6 recorded

Relationships

mitigates
from Remediate CVE-2023-28461
Mitigation
related-to
to Choosing Message Identifier
Technique
related-to
to Communication Channel Manipulation
Technique
related-to
to Cross Site Request Forgery
Technique
related-to
to Force the System to Reset Values
Technique
related-to
to Using Unpublished Interfaces or Functionality
Technique
2 external

References

nvd
CVE-2023-28461
open
cwe
CWE-306
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance