KEVIntel
Back to KEVs
9.8
CVSS
Critical

CVE-2023-20887

PUBLISHED

Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for...

Exploited in the wild Remote Low complexity No user interaction
Vendor
VMware
Product
Aria Operations for Networks (Formerly vRealize Network Insight)
Published
Jun 07, 2023
EPSS
—

Description

Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be able to perform a command injection attack resulting in remote code execution.

cisa nuclei_scanner metasploit

CVSS scores

CVSS v3.1 9.8 Critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitation status

Exploited in the wild

Recorded 2023-06-22 00:00:00 UTC · Source

SSVC decision points

Exploitation
active
Automatable
Yes
Technical impact
total

References

Known exploited vulnerability sources

Catalogues that list this CVE as a known exploited vulnerability.

Source Added
CISA Jun 22, 2023

Scanner integrations

Scanner Reference Detected
Metasploit https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/vmware_vrni_rce_cve_2023_20887.rb Apr 28, 2025
Nuclei https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-20887.yaml Apr 25, 2025

Potential proof of concepts

These PoCs are unverified and could contain malware. Use at your own risk.

vmware_vrni_rce_cve_2023_20887

metasploit · Created Unknown

Metasploit module for CVE-2023-20887

Malwareman007/CVE-2023-20887

github · Created 2023-09-25 00:41:45 UTC · 8 stars

VMWare vRealize Network Insight Pre-Authenticated RCE (CVE-2023-20887)

miko550/CVE-2023-20887

github · Created 2023-06-14 06:50:00 UTC · 6 stars

VMWare vRealize Network Insight Pre-Authenticated RCE (CVE-2023-20887)

sinsinology/CVE-2023-20887

github · Created 2023-06-13 13:17:23 UTC · 232 stars

VMWare vRealize Network Insight Pre-Authenticated RCE (CVE-2023-20887)

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Added to KEVIntel

  • Detected by Nuclei

  • Detected by Metasploit