Arraynetworks Arrayos Ag
6 CVEs affecting Arraynetworks Arrayos Ag. Latest disclosed: 2025-12-05. Critical: 3, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-51707 | Critical | 9.8 | 2023-12-22 | MotionPro in Array ArrayOS AG before 9.4.0.505 on AG and vxAG allows remote command execution via crafted packets. AG and vxAG 9.3.0.259.x are unaffected. |
CVE-2023-28461 | Critical | 9.8 | 2023-03-15 | Array Networks Array AG Series and vxAG (9.4.0.481 and earlier) allow remote code execution. An attacker can browse the filesystem on the SSL VPN gateway using… |
CVE-2022-42897 | Critical | 9.8 | 2022-10-13 | Array Networks AG/vxAG with ArrayOS AG before 9.4.0.469 allows unauthenticated command injection that leads to privilege escalation and control of the system… |
CVE-2023-41121 | High | 7.5 | 2023-08-25 | Array AG OS before 9.4.0.499 allows denial of service: remote attackers can cause system service processes to crash through abnormal HTTP operations. |
CVE-2025-66644 | High | 7.2 | 2025-12-05 | Array Networks ArrayOS AG before 9.4.5.9 allows command injection, as exploited in the wild in August through December 2025. |
CVE-2023-24613 | Medium | 4.9 | 2023-02-03 | The user interface of Array Networks AG Series and vxAG through 9.4.0.470 could allow a remote attacker to use the gdb tool to overwrite the backend function c… |