Arbitrary File Overwrite in HPE Aruba Networking Virtual Intranet Access (VIA) Microsoft Windows Client

CVE-2023-38402

What is CVE-2023-38402?

A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client allows unauthorized users to overwrite files with SYSTEM-level privileges. An attacker exploiting this vulnerability could potentially trigger a Denial-of-Service condition that disrupts the Microsoft Windows operating system boot process, leading to significant operational disruptions. Organizations using the affected VIA client should review their systems for potential exploitation risks and follow best practices to mitigate this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References