NVD disclosure day

Published threat advisories for June 7, 2023

CVE advisoryKnown Exploit

CVE-2023-20887

VMware Aria Operations for Networks Command Injection Vulnerability

Halo Surface Signal: 3 out of 5 — possibly public-facing.

VMware Aria Operations for Networks is affected by a command injection vulnerability. This vulnerability allows an unauthorized actor with network access to execute commands remotely, posing a business risk to affected organizations and systems.

NVD published: • CISA KEV
CVE advisoryKnown Exploit

CVE-2023-33538

TP-Link Router Command Injection Vulnerability.

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A command injection vulnerability has been identified in certain TP-Link router models. This flaw could allow unauthorized execution of commands on affected devices, potentially impacting network integrity and data. Organizations are advised to identify and address vulnerable systems.

NVD published: • CISA KEV