What is VMware Aria Operations for Networks?
VMware Aria Operations for Networks, formerly known as vRealize Network Insight, a network monitoring tool that monitors and analyzes networks across multiple clouds.
What is the Attack?
CVE-2023-20887 is a command injection vulnerability in Aria Operations for Networks that allows an unauthenticated attacker with network access to achieve remote code execution.
The vulnerability has a CVSS base score of 9.8 and is rated critical by VMware.
Why is this Significant?
This is significant because proof-of-concept (PoC) code is publicly available for CVE-2023-20887, which VMware has confirmed is being exploited in the wild. As such, attacks that leverage the vulnerability are expected to increase.
FortiGuard Labs advises that the patch should be applied as soon as possible.
What is the Vendor Solution?
VMware released a patch for CVE-2023-20887 on June 7th, 2023.
For details, please refer to the link “VMSA-2023-0012.2 ” to in the Appendix.
What FortiGuard Coverage is available?
FortiGuard Labs has released a new IPS signature “VMware.Aria.Operations.CVE-2023-20887.Command.Injection” in version 24.588.
