Skip to content

VMware Releases Security Updates for Aria Operations for Networks - 20230901001

Overview

Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation. VMware has evaluated the severity of this issue to be in the critical severity range with a maximum CVSSv3 base score of 9.8.

A malicious actor with network access to Aria Operations for Networks could bypass SSH authentication to gain access to the Aria Operations for Networks CLI.

What is the vulnerability?

VMware Aria Operations for Networks address multiple vulnerabilities. Please review each product's security bulletin for details.

What is vulnerable?

The vulnerability affects the following products:

  • VMware Aria Operations for Networks - 6.11
  • VMware Aria Operations Networks - 6.x

What has been observed?

There is no evidence of exploitation affecting Western Australian Government networks at the time of publishing.

Recommendation

The WA SOC recommends administrators apply the solutions as per vendor instructions to all affected devices within the expected timeframes.