# CVE-2023-20887

Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be able to perform a command injection attack resulting in remote code execution.

- Page: https://www.vulneraibility.com/cve/CVE-2023-20887
- CVSS: 9.8
- Known exploited: yes, in CISA KEV since 2023-06-22; CISA due date 2023-07-13
- EPSS: 98.28% (percentile 99.9)
- Public exploit code: 1 Metasploit module · 3 GitHub proofs of concept · 1 Nuclei template (first 2023-06-13)
- CISA SSVC: exploitation active, automatable yes, technical impact total (assessed 2025-01-27)
- Weakness: CWE-77
- Published: 2023-06-07

## Affected versions

- Aria Operations for Networks (Formerly vRealize Network Insight): affected Aria Operations for Networks (Formerly vRealize Network Insight) 6.x

A version outside these ranges is not a statement that it is unaffected.

## References

- [other] https://www.vmware.com/security/advisories/VMSA-2023-0012.html
- [other] http://packetstormsecurity.com/files/173761/VMWare-Aria-Operations-For-Networks-Remote-Command-Execution.html
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-20887

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.