CVE-2023-38401

HIGH 7.8CVE-2023-38401 · Published 15/08/2023 · updated 17/06/2026

In short

CVE-2023-38401 is a HIGH (CVSS 7.8) vulnerability affecting aruba virtual intranet access (hp).
Chance of exploitation in the next 30 days (EPSS): 0.23%, higher than 13.4% of all vulnerabilities.
Fix: update to 4.5.0 or later.

Package	Affected versions	Patched versions
aruba virtual intranet access hp	`< 4.5.0`	`4.5.0`

Description

A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow local users to elevate privileges. Successful exploitation could allow execution of arbitrary code with NT AUTHORITY\SYSTEM privileges on the operating system.

References

arubanetworks.com/assets/alert/ARUBA-PSA-2023-011.txt · Vendor Advisory

More vulnerabilities in aruba virtual intranet access

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free