CVE-2022-42897

Array Networks AG/vxAG with ArrayOS AG before 9.4.0.469 allows unauthenticated command injection that leads to privilege escalation and control of the system. NOTE: ArrayOS AG 10.x is unaffected.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-10-13

Last modified

2025-05-15

Weaknesses

CWE-77

Affected products

• Arrayos Ag (Arraynetworks)

References

• https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks…
• https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/fieldnotices.html