CVE-2023-38402

Description

A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to overwrite arbitrary files as NT AUTHORITY\SYSTEM. A successful exploit could allow these malicious users to create a Denial-of-Service (DoS) condition affecting the Microsoft Windows operating System boot process.

Related CPE's

References

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-011.txt

CvssV3 impact

CvssV2 impact