cve-2023-28461

CVE-2023-28461 is a serious improper authentication vulnerability affecting Array Networks AG's vxAG ArrayOS. In November 2024, the Cybersecurity and Infrastructure Security Agency (CISA) added this vulnerability to its Known Exploited Vulnerabilities Catalog due to ongoing active exploitation in the wild. The flaw can serve as an entry point for malicious cyber actors, putting organizations at substantial risk. Discussions on WindowsForum highlight the urgency of addressing this vulnerability, emphasizing the need for immediate patching and mitigation measures to protect network infrastructure from potential attacks.