Client Application Firewall
Array.Networks.Array.AG.client_sec.Remote.Code.Execution
Description
This indicates an attack attempt to exploit a Remote Code Execution vulnerability in Array Networks Array AG Series.
The vulnerability is due to insufficient sanitizing of user-supplied inputs in the application. A remote attacker may be able to exploit this to execute arbitrary remote code within the context of the vulnerable server.
Affected Products
ArrayOS AG version 9.4.0.481 and prior
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/software/ag/ArrayOS-Rel_AG_9_4_0_484.array
Version Updates
| Date | Version | Status | Detail |
|---|---|---|---|
| 2024-12-18 | 29.923 |
New
|
| ID | 56942 |
| Created | Nov 27, 2024 |
| Updated | Dec 17, 2024 |
| CVE ID | |
| Risk |
|
| Known Exploited | Yes |
| Exploit Prediction Score | 89.29% |
| Default Action | drop |
| Affected OS | Other |
| Affected App | Other |
| Profile Type | Code Injection |