Skip to content
OpenAdvisories
High · 7.1 CVE-2023-38402 EUVD-2023-42219GHSA-qf7v-qg58-xppr

Arbitrary File Overwrite in HPE Aruba Networking Virtual Intranet Access (VIA) Microsoft Windows Client

Published Aug 15, 2023 · Updated Oct 3, 2024 · Assigned by hpe

Description

A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to overwrite arbitrary files as NT AUTHORITY\SYSTEM. A successful exploit could allow these malicious users to create a Denial-of-Service (DoS) condition affecting the Microsoft Windows operating System boot process.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) HPE Aruba Networking Virtual Intranet Access (VIA) HPE Aruba Networking Virtual Intranet Access (VIA) client for Microsoft Windows – ≤ <=4.5.0 —

References