CVE-2024-22237 HIGH

CVE-2024-22237

Vendor N/A
Product VMware Aria Operations for Networks
Published February 6, 2024
Last update May 15, 2025

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Aria Operations for Networks contains a local privilege escalation vulnerability. A console user with access to Aria Operations for Networks may exploit this vulnerability to escalate privileges to gain root access to the system.

Key dates

02Disclosure timeline

February 6, 2024 CVE published
May 15, 2025 Record updated