Vulnerabilidades do Arraynetworks Arrayos Ag

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Arraynetworks Arrayos Ag: 2 registro(s), com versões afetadas e correções.
cpe:2.3:o:arraynetworks:arrayos_ag

CVE-2025-66644 Crítica · 9.8 KEV Alta · 58 CWE-78 05/12/2025

Array Networks ArrayOS AG OS Command Injection Vulnerability

Array Networks ArrayOS AG before 9.4.5.9 allows command injection, as exploited in the wild in August through December 2025.

CVE-2023-28461 Crítica · 9.8 KEV Urgente · 73 Ransomware CWE-287 15/03/2023

Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability

Array Networks Array AG Series and vxAG (9.4.0.481 and earlier) allow remote code execution. An attacker can browse the filesystem on the SSL VPN gateway using a flags attribute in an HTTP header without authentication. The product could then be exploited through a vulnerable URL. The 2023-03-09 vendor advisory stated "a new Array AG release with the fix will be available soon."