CVE-2023-28461

Array Networks Array AG Series and vxAG (9.4.0.481 and earlier) allow remote code execution. An attacker can browse the filesystem on the SSL VPN gateway using a flags attribute in an HTTP header without authentication. The product could then be exploited through a vulnerable URL. The 2023-03-09 vendor advisory stated "a new Array AG release with the fix will be available soon."

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_for_Remote_Code_Execution_Vulnerability_AG.pdf	Mitigation Vendor Advisory
https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_for_Remote_Code_Execution_Vulnerability_AG.pdf	Mitigation Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:arraynetworks:arrayos_ag:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:arraynetworks:ag1000:-:::::::*
	cpe:2.3:h:arraynetworks:ag1000t:-:::::::*
	cpe:2.3:h:arraynetworks:ag1000v5:-:::::::*
	cpe:2.3:h:arraynetworks:ag1100v5:-:::::::*
	cpe:2.3:h:arraynetworks:ag1150:-:::::::*
	cpe:2.3:h:arraynetworks:ag1200:-:::::::*
	cpe:2.3:h:arraynetworks:ag1200v5:-:::::::*
	cpe:2.3:h:arraynetworks:ag1500:-:::::::*
	cpe:2.3:h:arraynetworks:ag1500fips:-:::::::*
	cpe:2.3:h:arraynetworks:ag1500v5:-:::::::*
	cpe:2.3:h:arraynetworks:ag1600:-:::::::*
	cpe:2.3:h:arraynetworks:ag1600v5:-:::::::*
	cpe:2.3:h:arraynetworks:vxag:-:::::::*

History

10 Feb 2025, 19:15

Type	Values Removed	Values Added
References	() https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_for_Remote_Code_Execution_Vulnerability_AG.pdf - Mitigation, Vendor Advisory	() https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_for_Remote_Code_Execution_Vulnerability_AG.pdf - Mitigation, Vendor Advisory

02 Dec 2024, 17:15

Type	Values Removed	Values Added
References	() https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_for_Remote_Code_Execution_Vulnerability_AG.pdf - Mitigation, Vendor Advisory	() https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_for_Remote_Code_Execution_Vulnerability_AG.pdf - Mitigation, Vendor Advisory

26 Nov 2024, 02:00

Type	Values Removed	Values Added
CWE		CWE-306

21 Nov 2024, 07:55

Type	Values Removed	Values Added
References	() https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_for_Remote_Code_Execution_Vulnerability_AG.pdf - Mitigation, Vendor Advisory	() https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_for_Remote_Code_Execution_Vulnerability_AG.pdf - Mitigation, Vendor Advisory

24 Mar 2023, 14:57

Type	Values Removed	Values Added
CPE		cpe:2.3:h:arraynetworks:ag1200:-:::::::* cpe:2.3:h:arraynetworks:ag1000:-:::::::* cpe:2.3:h:arraynetworks:ag1200v5:-:::::::* cpe:2.3:h:arraynetworks:ag1150:-:::::::* cpe:2.3:h:arraynetworks:ag1600v5:-:::::::* cpe:2.3:h:arraynetworks:ag1000v5:-:::::::* cpe:2.3:h:arraynetworks:ag1500:-:::::::* cpe:2.3:h:arraynetworks:ag1500fips:-:::::::* cpe:2.3:h:arraynetworks:ag1100v5:-:::::::* cpe:2.3:h:arraynetworks:vxag:-:::::::* cpe:2.3:o:arraynetworks:arrayos_ag:::::::: cpe:2.3:h:arraynetworks:ag1600:-:::::::* cpe:2.3:h:arraynetworks:ag1000t:-:::::::* cpe:2.3:h:arraynetworks:ag1500v5:-:::::::*
References	~~(MISC) https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_for_Remote_Code_Execution_Vulnerability_AG.pdf -~~	(MISC) https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_for_Remote_Code_Execution_Vulnerability_AG.pdf - Mitigation, Vendor Advisory
CWE		CWE-287
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 9.8

15 Mar 2023, 23:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-03-15 23:15

Updated : 2025-03-14 20:01

NVD link : CVE-2023-28461

Mitre link : CVE-2023-28461

CVE.ORG link : CVE-2023-28461

JSON object : View

Products Affected

arraynetworks

ag1500v5
ag1000
ag1000v5
ag1200
ag1500fips
ag1600v5
arrayos_ag
ag1500
ag1600
ag1000t
ag1100v5
ag1200v5
vxag
ag1150

CWE

CWE-287

Improper Authentication

CWE-306

Missing Authentication for Critical Function

9.8 /10