Cyber Resilience

CVE-2023-38402

Hp Aruba Virtual Intranet Access ≤ 4.5.0

Published
15 August 2023
Modified
21 November 2024
Patch / advisory
View advisory
CVSS Score v3.1 7.1
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
EPSS Score 0.0020 10th percentile
Risk Priority 51 floored blend · peak EPSS

Summary

CVE-2023-38402 is a high-severity an unspecified weakness vulnerability in Hp Aruba Virtual Intranet Access. Its CVSS base score is 7.1 (High).

Operationally, ranked at the 10th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to overwrite arbitrary files as NT AUTHORITY\SYSTEM. A successful exploit could allow these malicious users to create a Denial-of-Service (DoS) condition affecting the Microsoft…

more

Windows operating System boot process.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2023-38401Same product: Hp Aruba Virtual Intranet Access
CVE-2025-43491Same product: Microsoft Windows
CVE-2023-36868Same product: Microsoft Windows
CVE-2024-20670Same product: Microsoft Windows
CVE-2024-6913Same product: Microsoft Windows
CVE-2023-23459Same product: Microsoft Windows
CVE-2023-46223Same product: Microsoft Windows
CVE-2023-24671Same product: Microsoft Windows
CVE-2024-30288Same product: Microsoft Windows
CVE-2024-22014Same product: Microsoft Windows

Affected Assets

hp
aruba virtual intranet access
≤ 4.5.0

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References