7.8
High
CVE-2023-38401 A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow local users to…
Description
A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow local users to elevate privileges. Successful exploitation could allow execution of arbitrary code with NT AUTHORITY\SYSTEM privileges on the operating system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| HPE Aruba Networking Virtual Intranet Access (VIA) | Versions not published | |
| aruba_virtual_intranet_access 4.5 | earliest → 4.5.0 | No fix stated |