CVE-2023-28460

🗓️ 15 Mar 2023 00:00:00Reported by mitreType

Command injection vulnerability in Array Networks APV products allows remote attacker to execute arbitrary shell code via crafted packet, fixed in 8.6.1.262 or 10.4.2.93

Reporter	Title	Published	Views	Family All 8
CNNVD	Array Networks APV products 命令注入漏洞	15 Mar 202300:00	–	cnnvd
Cvelist	CVE-2023-28460	15 Mar 202300:00	–	cvelist
EUVD	EUVD-2023-32139	3 Oct 202520:07	–	euvd
NVD	CVE-2023-28460	15 Mar 202323:15	–	nvd
Prion	Command injection	15 Mar 202323:15	–	prion
Positive Technologies	PT-2023-21733 · Array Networks · Array Networks Apv	15 Mar 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-28460	23 May 202506:02	–	redhatcve
Vulnrichment	CVE-2023-28460	15 Mar 202300:00	–	vulnrichment

NVD

Node

arraynetworks array_osRange≤8.6.1.243

arraynetworks array_osRange9.0.1.12–10.4.0.79

arraynetworks array_osRange10.4.2.12–10.4.2.58

arraynetworks array_osMatch10.4.3.2

AND

arraynetworks apv10650Match-

arraynetworks apv11600Match-

arraynetworks apv1600Match-

arraynetworks apv1600tMatch-

arraynetworks apv1600v5Match-

arraynetworks apv1800Match-

arraynetworks apv2600Match-

arraynetworks apv2600v5Match-

arraynetworks apv2800Match-

arraynetworks apv3600Match-

arraynetworks apv3600v5Match-

arraynetworks apv3650Match-

arraynetworks apv5600Match-

arraynetworks apv5800Match-

arraynetworks apv6600Match-

arraynetworks apv6600fipsMatch-

arraynetworks apv7600Match-

arraynetworks apv7800Match-

arraynetworks apv800Match-

arraynetworks vapvMatch-

Source	Link
support	www.support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_Command_Injection_Vulnerabilities_APV_ID-133258.pdf

21 Nov 2024 07:55Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.2

EPSS0.01103

SSVC

CWE-77