arraynetworks arrayos ag

Name: arraynetworks arrayos ag
Brand: arraynetworks

productUS

cpe:2.3:o:arraynetworks:arrayos_ag:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

public exploit

by severity

4critical1high1medium0low

updated 2026-10-27

vulnerabilities (6)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-28461US	critical9.8OT critical	68.1% (99th)	KEV	no fix	2023-03-15	≤ 9.4.0.481
CVE-2025-66644US	critical9.8OT critical	3.42% (89th)	KEV	9.4.5.9	2025-12-05	< 9.4.5.9
CVE-2022-42897US	critical9.8	1.60% (76th)	—	no fix	2022-10-13	≤ 9.4.0.469
CVE-2023-51707US	critical9.8	1.27% (70th)	—	9.4.0.505	2023-12-22	< 9.4.0.505
CVE-2023-41121US	high7.5	0.84% (58th)	—	9.4.0.499	2023-08-25	< 9.4.0.499
CVE-2023-24613US	medium4.9	0.79% (56th)	—	no fix	2023-02-03	≤ 9.4.0.470

The flaw types (CWEs) most of these CVEs share.

CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')2 CVEs
CWE-287Improper Authentication1 CVEs
CWE-306Missing Authentication for Critical Function1 CVEs
CWE-400Uncontrolled Resource Consumption1 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1 CVEs
CWE-787Out-of-bounds Write1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.