Arraynetworks vulnerabilities
We track 4 vulnerabilities in Arraynetworks products across 2 products. 4 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on December 22, 2023.
Latest Arraynetworks vulnerabilities
- 9.8 Critical severity
Arrayos Ag: Improper Neutralization of Special Elements used in a Command
MotionPro in Array ArrayOS AG before 9.4.0.505 on AG and vxAG allows remote command execution via crafted packets. AG and vxAG 9.3.0.259.x are unaffected.
- 9.8 Critical severity
Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Exploited
Array Networks Array AG Series and vxAG (9.4.0.481 and earlier) allow remote code execution. An attacker can browse the filesystem on the SSL VPN gateway using a flags attribute in an HTTP header without authentication. The product could then be exploited thro
- 7.2 High severity
Array OS: Improper Neutralization of Special Elements used in a Command
A command injection vulnerability was discovered in Array Networks APV products. A remote attacker can send a crafted packet after logging into the affected appliance as an administrator, resulting in arbitrary shell code execution. This is fixed in 8.6.1.262
- 9.8 Critical severity
Arrayos Ag: Improper Neutralization of Special Elements used in a Command
Array Networks AG/vxAG with ArrayOS AG before 9.4.0.469 allows unauthenticated command injection that leads to privilege escalation and control of the system. NOTE: ArrayOS AG 10.x is unaffected.