Patch Ticker

HPE VIA client local privilege escalation and command injection flaws

Several holes in a virtual office network app let attackers hack your PC.

Summary

HPE Virtual Intranet Access (VIA) client versions up to and including 4.7.8 have several flaws, including local privilege escalation, command execution and information disclosure. Some flaws can be reached by unauthenticated remote attackers.

What to do

No fixed version is named in the sources. Check that the installed version is newer than 4.7.8 and read HPE's security advisory.

Products and platforms

  • HPE Virtual Intranet Access (VIA)

CVE IDs

Sources

Times

First published

First seen