Security Resilience

CVE-2023-38402

Hp Aruba Virtual Intranet Access ≤ 4.5.0

Published
15 August 2023
Modified
21 November 2024
Patch / advisory
View advisory
CVSS Score v3.1 7.1
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
EPSS Score 0.0021 10th percentile
Risk Priority 51 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-38402 is a high-severity an unspecified weakness vulnerability in Hp Aruba Virtual Intranet Access. Its CVSS base score is 7.1 (High).

Operationally, ranked at the 10th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to overwrite arbitrary files as NT AUTHORITY\SYSTEM. A successful exploit could allow these malicious users to create a Denial-of-Service (DoS) condition affecting the Microsoft…

more

Windows operating System boot process.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2023-38401Same product: Hp Aruba Virtual Intranet Access
CVE-2023-36868Same product: Microsoft Windows
CVE-2024-20670Same product: Microsoft Windows
CVE-2024-7977Same product: Microsoft Windows
CVE-2023-46224Same product: Microsoft Windows
CVE-2023-46814Same product: Microsoft Windows
CVE-2023-32553Same product: Microsoft Windows
CVE-2023-22244Same product: Microsoft Windows
CVE-2023-31019Same product: Microsoft Windows
CVE-2023-4891Same product: Microsoft Windows

Affected Assets

hp
aruba virtual intranet access
≤ 4.5.0

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References