THREATOPS
THREAT OPSCVEs › CVE-2023-28461

CVE-2023-28461 — Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability

CISA KEVExploited: confirmedArray Networks

Array Networks AG and vxAG ArrayOS contain a missing authentication for critical function vulnerability that allows an attacker to read local files and execute code on the SSL VPN gateway.

Vulnerability details