VulnSocial

CVE-2023-34051Active Exploitation(vmware / aria_operations_for_logs)

MEDIUMCVSS 9.8 · CRITICAL

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Patch vmware aria_operations_for_logs systems immediately
  • Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

VMware Aria Operations for Logs contains an authentication bypass vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution.

vmware CVEsBack to dashboard
4.0/ 10 priority

Sources & remediation

Patch / fix
Weakness type (CWE)
CWE-863

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • aria_operations_for_logs

Threat summary

  • Active exploitation appears in 1 classified signals
  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Active exploitation reported across 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
vmware
Products
aria_operations_for_logs

7 versions affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-03-08: 1Active Exploitation · 2026-03-08: 1Patch / Workaround · 2026-03-08: 1Technical Details · 2026-03-08: 103-08
Signal classification1 categories
Active Exploitation
1100.0%
Full discourse1 post
  • Dev@computerauditor
    Active Exploitation

    VMware Aria Ops for Logs RCE (CVE-2023-34051): A critical 9.8 CVSS vulnerability. Attackers are actively exploiting directory traversal to achieve arbitrary file writes leading to RCE. Patch your systems ASAP. Don't become a target. https://t.co/QofpTgGqbd

    Post summary

    CVE‑2023‑34051 is a critical RCE vulnerability in VMware Aria Ops for Logs being actively exploited via directory traversal; patch immediately.

    0000089
    128 followersView on X
CPE platform detail7 entries

7 of 7 entries

PartVendorProductVersionTarget SWTarget HW
Appvmwarearia_operations_for_logs4.0--
Appvmwarearia_operations_for_logs5.0--
Appvmwarearia_operations_for_logs8.10--
Appvmwarearia_operations_for_logs8.10.2--
Appvmwarearia_operations_for_logs8.12--
Appvmwarearia_operations_for_logs8.6--
Appvmwarearia_operations_for_logs8.8--

Explore more

Back to dashboardvmware CVEsaria_operations_for_logs vulnerabilities