CVE-2023-38401

Local Privilege Escalation in HPE Aruba Networking Virtual Intranet Access (VIA) Microsoft Windows Client

High · published August 15, 2023

CVSS v3.1
7.8
EPSS
0%
Percentile
12.7
In the wild
Unconfirmed
What it is

A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow local users to elevate privileges. Successful exploitation could allow execution of arbitrary code with NT AUTHORITY\SYSTEM privileges on the operating system.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00227 · 12.7th percentile
Published
2023-08-15T18:16Z
EPSS history
Timeline
  • 15 AUG 18:16Z
    Local Privilege Escalation in HPE Aruba Networking Virtual Intranet Access (VIA) Microsoft Windows Client
    cvelistv5