CVE-2023-28460

A command injection vulnerability was discovered in Array Networks APV products

published March 15, 2023

CVSS
—
EPSS
2%
Percentile
75.9
In the wild
Unconfirmed
What it is

A command injection vulnerability was discovered in Array Networks APV products. A remote attacker can send a crafted packet after logging into the affected appliance as an administrator, resulting in arbitrary shell code execution. This is fixed in 8.6.1.262 or newer and 10.4.2.93 or newer.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01616 · 75.9th percentile
Published
2023-03-15T00:00Z
EPSS history
Timeline
  • 15 MAR 00:00Z
    A command injection vulnerability was discovered in Array Networks APV products
    cvelistv5