CVE-2023-20887
CRITICAL KEV NUCLEIVMWare Aria Operations for Networks (vRealize Network Insight) pre-authenticated RCE
Title source: metasploitExploitation Summary
CVE-2023-20887 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added June 22, 2023.
EIP tracks 4 public exploits from researchers including sinsinology, Malwareman007, miko550, including a Metasploit module exploits/linux/http/vmware_vrni_rce_cve_2023_20887.
A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a working proof-of-concept exploit for CVE-2023-20887, a pre-authenticated remote code execution vulnerability in VMWare Aria Operations for Networks (vRealize Network Insight). The exploit leverages command injection via the Apache Thrift RPC interface to achieve root-level command execution.
Description
Aria Operations for Networks contains a command injection vulnerability. A malicious actor with network access to VMware Aria Operations for Networks may be able to perform a command injection attack resulting in remote code execution.
Exploits (4)
This repository contains a working proof-of-concept exploit for CVE-2023-20887, a pre-authenticated remote code execution vulnerability in VMWare Aria Operations for Networks (vRealize Network Insight). The exploit leverages command injection via the Apache Thrift RPC interface to achieve root-level command execution.
This repository contains a functional exploit for CVE-2023-20887, a pre-authenticated RCE vulnerability in VMWare Aria Operations for Networks (vRealize Network Insight). The exploit leverages command injection via the Apache Thrift RPC interface to achieve remote code execution as root.
This exploit targets CVE-2023-20887, a pre-authenticated RCE vulnerability in VMWare vRealize Network Insight. It sends a crafted Thrift payload to trigger command injection, resulting in a reverse shell.
This Metasploit module exploits CVE-2023-20887, a pre-authenticated RCE vulnerability in VMWare Aria Operations for Networks (vRealize Network Insight) via Apache Thrift RPC interface command injection. It bypasses a reverse proxy to execute arbitrary commands as root.
Nuclei Templates (1)
title:"VMware vRealize Network Insight" || http.title:"vmware vrealize network insight" || http.title:"vmware aria operations"
title="VMware vRealize Network Insight" || title="vmware aria operations" || title="vmware vrealize network insight"
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H