Arbitrary File Overwrite in HPE Aruba Networking Virtual Intranet Access (VIA) Microsoft Windows Client

CVE-2023-38402

What is CVE-2023-38402?

A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client allows unauthorized users to overwrite files with SYSTEM-level privileges. An attacker exploiting this vulnerability could potentially trigger a Denial-of-Service condition that disrupts the Microsoft Windows operating system boot process, leading to significant operational disruptions. Organizations using the affected VIA client should review their systems for potential exploitation risks and follow best practices to mitigate this vulnerability.

References