CVE-2023-20887

🗓️ 07 Jun 2023 14:16:56Reported by vmwareType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 655 Views🌐 WEB

Aria Operations for Networks has command injection vulnerabilit

Reporter	Title	Published	Views	Family All 46
0day.today	VMWare Aria Operations For Networks Remote Command Execution Exploit	27 Jul 202300:00	–	zdt
GithubExploit	Exploit for Command Injection in Vmware Aria_Operations_For_Networks	14 Jun 202306:50	–	githubexploit
GithubExploit	Exploit for Command Injection in Vmware Aria_Operations_For_Networks	13 Jun 202313:17	–	githubexploit
GithubExploit	Exploit for Command Injection in Vmware Aria_Operations_For_Networks	25 Sep 202300:41	–	githubexploit
ATTACKERKB	CVE-2023-20887	7 Jun 202300:00	–	attackerkb
BDU FSTEC	The vulnerability of the monitoring tool for VMware Aria Operations lies in the ability to execute commands, allowing a perpetrator to execute arbitrary code.	9 Jun 202300:00	–	bdu_fstec
Circl	CVE-2023-20887	7 Jun 202323:37	–	circl
CISA KEV Catalog	Vmware Aria Operations for Networks Command Injection Vulnerability	22 Jun 202300:00	–	cisa_kev
CISA	CISA Adds Six Known Exploited Vulnerabilities to Catalog	22 Jun 202312:00	–	cisa
CNNVD	VMware Aria Operations 命令注入漏洞	7 Jun 202300:00	–	cnnvd

NVD

Node

vmware aria_operations_for_networksRange6.2.0–6.10.0

[
  {
    "defaultStatus": "unaffected",
    "product": "Aria Operations for Networks (Formerly vRealize Network Insight)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Aria Operations for Networks (Formerly vRealize Network Insight) 6.x"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/173761/VMWare-Aria-Operations-For-Networks-Remote-Command-Execution.html
vmware	www.vmware.com/security/advisories/VMSA-2023-0012.html
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
pseudo	query param	/api/vip/i18n/api/v2/translation/products/vRNIUI/versions/6.10.0/locales/en-GB/components/UI	Potential unauthenticated information disclosure or misbehavior check used to identify vulnerability; part of the exploitation flow for RCE in VRNI UI translation endpoint.	CWE-77
shell	request body	/saas./resttosaasservlet	Thrift-based payload delivery for command execution via the vulnerable RPC interface; enables remote code execution when combined with appropriate payload.	CWE-77

17 Jun 2026 05:31Current

9.8High risk

Vulners AI Score9.8

CVSS 3.19.8

EPSS0.98243

SSVC