CVE-2023-28461 Array Networks AG/VxAG ArrayOS
Array Networks AG and vxAG ArrayOS contain a missing authentication for critical function vulnerability that allows an attacker to read local files and execute code on the SSL VPN gateway.
- CVSS
- not scored
On CISA’s exploited list
Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability
- Added
- 2024-11-25
- Federal patch deadline
- 2024-12-16
- Ransomware use
- known