Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2023-38402

Arbitrary File Overwrite in HPE Aruba Networking Virtual Intranet Access (VIA) Microsoft Windows Client

Description

A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to overwrite arbitrary files as NT AUTHORITY\SYSTEM. A successful exploit could allow these malicious users to create a Denial-of-Service (DoS) condition affecting the Microsoft Windows operating System boot process.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hewlett Packard Enterprise (HPE) HPE Aruba Networking Virtual Intranet Access (VIA)

Default version status: unaffected

  • HPE Aruba Networking Virtual Intranet Access (VIA) client for Microsoft Windows to ≤ <=4.5.0affected

References