CVE-2023-38402 (published 2023-08-15T18:47:59.783Z)
A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to overwrite arbitrary files as NT AUTHORITY\SYSTEM. A successful exploit could allow these malicious users to create a Denial-of-Service (DoS) condition affecting the Microsoft Windows operating System boot process.
Affected products: Vendor: Hewlett Packard Enterprise (HPE)
Product: HPE Aruba Networking Virtual Intranet Access (VIA)
Versions: HPE Aruba Networking Virtual Intranet Access (VIA) client for Microsoft Windows