CVE-2023-38401

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow local users to elevate privileges. Successful exploitation could allow execution of arbitrary code with NT AUTHORITY\SYSTEM privileges on the operating system.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Hewlett Packard Enterprise (HPE)	HPE Aruba Networking Virtual Intranet Access (VIA)	>= HPE Aruba Networking Virtual Intranet Access (VIA) client for Microsoft Windows, <= <=4.5.0
hp	aruba_virtual_intranet_access	<= 4.5.0

References

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-011.txtVendor Advisory
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-011.txtVendor Advisory

Timeline

Published: Aug 15, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-384027.1A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to overwrite arbitrary files as CVE-2023-384037.5iperf3 before 3.14 allows peers to cause an integer overflow and heap corruption via a crafted length field.CVE-2023-384048.8The XPRTLD web application in Veritas InfoScale Operations Manager (VIOM) before 8.0.0.410 allows an authenticated attacker to upload all ty CVE-2023-384057.5On Crestron 3-Series Control Systems before 1.8001.0187, crafting and sending a specific BACnet packet can cause a crash.CVE-2023-384069.8bgpd/bgp_flowspec.c in FRRouting (FRR) before 8.4.3 mishandles an nlri length of zero, aka a "flowspec overflow."CVE-2023-384077.5bgpd/bgp_label.c in FRRouting (FRR) before 8.5 attempts to read beyond the end of the stream during labeled unicast parsing.CVE-2023-384089.8The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if CVE-2023-384095.5An issue was discovered in set_con2fb_map in drivers/video/fbdev/core/fbcon.c in the Linux kernel before 6.2.12. Because an assignment occur CVE-2023-38418.8A vulnerability has been found in NxFilter 4.3.2.5 and classified as problematic. This vulnerability affects unknown code of the file user.j CVE-2023-384107.8The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. A user may be able to ele CVE-2023-384117.8Improper access control in the Intel Smart Campus android application before version 9.4 may allow an authenticated user to potentially enab CVE-2023-384128.8Netgear R6900P v1.3.3.154 was discovered to contain multiple buffer overflows via the wla_ssid and wlg_ssid parameters at ia_ap_setting.cgi.