Security Resilience

CVE-2023-38401

Hp Aruba Virtual Intranet Access ≤ 4.5.0

Published
15 August 2023
Modified
21 November 2024
Patch / advisory
View advisory
CVSS Score v3.1 7.8
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0023 12th percentile
Risk Priority 55 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-38401 is a high-severity an unspecified weakness vulnerability in Hp Aruba Virtual Intranet Access. Its CVSS base score is 7.8 (High).

Operationally, ranked at the 12th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow local users to elevate privileges. Successful exploitation could allow execution of arbitrary code with NT AUTHORITY\SYSTEM privileges on the operating system.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2023-38402Same product: Hp Aruba Virtual Intranet Access
CVE-2023-36868Same product: Microsoft Windows
CVE-2024-20670Same product: Microsoft Windows
CVE-2024-7977Same product: Microsoft Windows
CVE-2023-46224Same product: Microsoft Windows
CVE-2023-46814Same product: Microsoft Windows
CVE-2023-32553Same product: Microsoft Windows
CVE-2023-22244Same product: Microsoft Windows
CVE-2023-31019Same product: Microsoft Windows
CVE-2023-4891Same product: Microsoft Windows

Affected Assets

hp
aruba virtual intranet access
≤ 4.5.0

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References