CVE-2023-38401: HP Aruba Virtual Intranet Access

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow local users to elevate privileges. Successful exploitation could allow execution of arbitrary code with NT AUTHORITY\SYSTEM privileges on the operating system.

Affected products

• HP Aruba Virtual Intranet Access: before 4.5.0 (fixed in 4.5.0)

Published 2023-08-15. Last modified 2026-06-17.