Arrayos Ag vulnerabilities
3 known vulnerabilities in Arrayos Ag from Arraynetworks. 3 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
Arrayos Ag: Improper Neutralization of Special Elements used in a Command
MotionPro in Array ArrayOS AG before 9.4.0.505 on AG and vxAG allows remote command execution via crafted packets. AG and vxAG 9.3.0.259.x are unaffected.
- 9.8 Critical severity
Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Exploited
Array Networks Array AG Series and vxAG (9.4.0.481 and earlier) allow remote code execution. An attacker can browse the filesystem on the SSL VPN gateway using a flags attribute in an HTTP header without authentication. The product could then be exploited thro
- 9.8 Critical severity
Arrayos Ag: Improper Neutralization of Special Elements used in a Command
Array Networks AG/vxAG with ArrayOS AG before 9.4.0.469 allows unauthenticated command injection that leads to privilege escalation and control of the system. NOTE: ArrayOS AG 10.x is unaffected.