CVE-2023-20890

🗓️ 29 Aug 2023 17:38:05Reported by vmwareType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 113 Views

Aria Ops for Networks arbitrary file write vulnerability for remote code executio

Reporter	Title	Published	Views	Family All 16
BDU FSTEC	The vulnerability of the network and application monitoring tool VMware Aria Operations for Networks, which allows unauthorized users to download files of a malicious nature, enables attackers to execute arbitrary code.	31 Aug 202300:00	–	bdu_fstec
Circl	CVE-2023-20890	29 Aug 202322:17	–	circl
CNNVD	VMware Aria Operations 路径遍历漏洞	29 Aug 202300:00	–	cnnvd
Cvelist	CVE-2023-20890	29 Aug 202317:38	–	cvelist
EUVD	EUVD-2023-25061	3 Oct 202520:07	–	euvd
hivepro	A Critical Vulnerability uncovered in VMware Aria Operations for Networks	1 Sep 202308:41	–	hivepro
NCSC	Vulnerabilities fixed in VMware Aria Operations Networks	31 Aug 202300:00	–	ncsc
NVD	CVE-2023-20890	29 Aug 202318:15	–	nvd
OSV	CVE-2023-20890	29 Aug 202318:15	–	osv
Prion	Remote code execution	29 Aug 202318:15	–	prion

NVD

Node

vmware aria_operations_for_networksRange6.2.0–6.11.0

[
  {
    "defaultStatus": "unaffected",
    "product": "Aria Operations for Networks",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Aria Operations for Networks 6.x"
      }
    ]
  }
]

Source	Link
vmware	www.vmware.com/security/advisories/VMSA-2023-0018.html

17 Jun 2026 05:31Current

8.7High risk

Vulners AI Score8.7

CVSS 3.17.2

EPSS0.2164

SSVC

CWE-22