CVE-2022-23678

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

A vulnerability in the Aruba Virtual Intranet Access (VIA) client for Microsoft Windows operating system client communications that could allow for an attacker in a privileged network position to intercept sensitive information in Aruba Virtual Intranet Access (VIA) client for Microsoft Windows operating system versions: 4.3.0 build 2208101 and below. Aruba has released upgrades for Virtual Intranet Access (VIA) Client that address this security vulnerability.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	Aruba Virtual Intranet Access (VIA)	Windows Client Only - All versions lower than VIA 4.3.0 build 2208101

References

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-011.txtVendor Advisory
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-011.txtVendor Advisory

Timeline

Published: Sep 6, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-236798.8AOS-CX lacks Anti-CSRF protections in place for state-changing operations. This can potentially be exploited by an attacker to execute comma CVE-2022-23689.8Authentication Bypass by Spoofing in GitHub repository microweber/microweber prior to 1.2.20.CVE-2022-236808.8AOS-CX lacks Anti-CSRF protections in place for state-changing operations. This can potentially be exploited by an attacker to execute comma CVE-2022-236817.8Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit CVE-2022-236827.8Multiple vulnerabilities exist in the AOS-CX command line interface that could lead to authenticated command injection. A successful exploit CVE-2022-236837.2Authenticated command injection vulnerabilities exist in the AOS-CX Network Analytics Engine via NAE scripts. Successful exploitation of the CVE-2022-236848.8A vulnerability in the web-based management interface of AOS-CX could allow a remote authenticated user with read-only privileges to escalat CVE-2022-236858.8A vulnerability in the ClearPass Policy Manager web-based management interface exists which exposes some endpoints to a lack of Cross-Site R CVE-2022-236864.3Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilit CVE-2022-236874.3Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilit CVE-2022-236884.3Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilit CVE-2022-236894.3Multiple vulnerabilities exist in the processing of packet data by the LLDP service of AOS-CX. Successful exploitation of these vulnerabilit