Cyber Resilience

CVE-2023-38401

Hp Aruba Virtual Intranet Access ≤ 4.5.0

Published
15 August 2023
Modified
21 November 2024
Patch / advisory
View advisory
CVSS Score v3.1 7.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0022 12th percentile
Risk Priority 55 floored blend · peak EPSS

Summary

CVE-2023-38401 is a high-severity an unspecified weakness vulnerability in Hp Aruba Virtual Intranet Access. Its CVSS base score is 7.8 (High).

Operationally, ranked at the 12th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow local users to elevate privileges. Successful exploitation could allow execution of arbitrary code with NT AUTHORITY\SYSTEM privileges on the operating system.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2023-38402Same product: Hp Aruba Virtual Intranet Access
CVE-2025-43491Same product: Microsoft Windows
CVE-2023-36868Same product: Microsoft Windows
CVE-2024-20670Same product: Microsoft Windows
CVE-2024-6913Same product: Microsoft Windows
CVE-2023-23459Same product: Microsoft Windows
CVE-2023-46223Same product: Microsoft Windows
CVE-2023-24671Same product: Microsoft Windows
CVE-2024-30288Same product: Microsoft Windows
CVE-2024-22014Same product: Microsoft Windows

Affected Assets

hp
aruba virtual intranet access
≤ 4.5.0

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References