{"cvss":9.8,"datePublished":"2024-11-25","dateUpdated":"2024-11-25","description":"Array Networks AG and vxAG ArrayOS contain a missing authentication for critical function vulnerability that allows an attacker to read local files and execute code on the SSL VPN gateway.","dueDate":"2024-12-16","id":"CVE-2023-28461","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Known","notes":"https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_for_Remote_Code_Execution_Vulnerability_AG.pdf ; https://nvd.nist.gov/vuln/detail/CVE-2023-28461","product":"AG/vxAG ArrayOS","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"CRITICAL","source":"cisa_known_exploited","title":"Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability","vendor":"Array Networks "}