2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2023-28460" ,
"sourceIdentifier" : "cve@mitre.org" ,
"published" : "2023-03-15T23:15:10.013" ,
2024-12-08 03:06:42 +00:00
"lastModified" : "2024-11-21T07:55:07.767" ,
"vulnStatus" : "Modified" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "A command injection vulnerability was discovered in Array Networks APV products. A remote attacker can send a crafted packet after logging into the affected appliance as an administrator, resulting in arbitrary shell code execution. This is fixed in 8.6.1.262 or newer and 10.4.2.93 or newer."
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 7.2 ,
"baseSeverity" : "HIGH" ,
2023-04-24 12:24:31 +02:00
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "HIGH" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "HIGH"
2023-04-24 12:24:31 +02:00
} ,
"exploitabilityScore" : 1.2 ,
"impactScore" : 5.9
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-77"
}
]
}
] ,
"configurations" : [
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:arraynetworks:array_os:*:*:*:*:*:*:*:*" ,
"versionEndIncluding" : "8.6.1.243" ,
"matchCriteriaId" : "B95D68DD-66E0-49E9-A629-CFC27B1B64AE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:arraynetworks:array_os:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "9.0.1.12" ,
"versionEndIncluding" : "10.4.0.79" ,
"matchCriteriaId" : "A495E881-FB00-4D4F-823B-74E09A8FFF13"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:arraynetworks:array_os:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "10.4.2.12" ,
"versionEndIncluding" : "10.4.2.58" ,
"matchCriteriaId" : "B21C2B5E-B719-405E-A440-8E696B1CE783"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:arraynetworks:array_os:10.4.3.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C2866A3C-911B-451E-8D1E-FB2D3FE44BD1"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:arraynetworks:apv10650:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4B8896E1-0827-4DF6-A632-59E1C070BF04"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:arraynetworks:apv11600:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "3B8B1A9F-751E-4DB9-89EB-26EDAD38D277"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:arraynetworks:apv1600:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "91D1CE39-AAE9-41E8-9EBE-52CE62F04A12"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:arraynetworks:apv1600t:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1B69124F-8796-41C8-AEDF-A78623777E04"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:arraynetworks:apv1600v5:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5593430D-614C-41B7-BFDE-DC386B071E2D"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:arraynetworks:apv1800:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A31B40DD-3C61-45E4-9A32-CAC257E28C4A"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:arraynetworks:apv2600:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9EC12DCC-F257-4FF8-9AC3-F45F1AF1C3E8"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:arraynetworks:apv2600v5:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "BEC95ED6-D1DC-4E64-917F-36796B5B2492"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:arraynetworks:apv2800:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "2F54F2DE-889D-4036-AB92-74EE347FF689"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:arraynetworks:apv3600:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "27F1DC25-40C7-433C-A8A1-5BA0BF7B8203"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:arraynetworks:apv3600v5:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "243C97F3-4440-4A7D-BF6A-59CDC5611001"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:arraynetworks:apv3650:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "71B5A8EA-7442-4F51-9A2B-1658A9918534"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:arraynetworks:apv5600:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "3D0CEF16-7C68-4BA0-BD75-210DD155255F"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:arraynetworks:apv5800:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5E3C0C3B-09EB-411D-90DF-69B0F90024C4"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:arraynetworks:apv6600:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7209BC0E-E55F-4071-923F-25DD4FA3C281"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:arraynetworks:apv6600fips:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D3025939-798D-4B63-A3FE-712E15D6CC3F"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:arraynetworks:apv7600:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0FF0EC72-8236-430B-B759-46ACFEF3E9CD"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:arraynetworks:apv7800:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "935D6EB4-2B2C-43E0-8FCF-01B559840DF8"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:arraynetworks:apv800:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A1D81145-DB70-4819-BA19-773102337AA8"
} ,
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:arraynetworks:vapv:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C18E4F55-6CF4-40D8-954E-12640A4D5224"
}
]
}
]
}
] ,
"references" : [
{
"url" : "https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_Command_Injection_Vulnerabilities_APV_ID-133258.pdf" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Vendor Advisory"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_Command_Injection_Vulnerabilities_APV_ID-133258.pdf" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
2023-04-24 12:24:31 +02:00
}
]
}
