Authenticated Command Injection Vulnerability in HPE Networking VIA

Summary

A command injection vulnerability exists in HPE Networking VIA. Successful exploitation could allow an authenticated administrative user to execute arbitrary commands with elevated privileges on the underlying operating system.

Remediation

1. Inventory every Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA) deployment, including staging.
2. No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

• Referencehttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05173en_us&docLocale=en_US