Arraynetworks Arrayos Ag — known CVE vulnerabilities

Every CVE whose affected-product data names Arraynetworks Arrayos Ag, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2022-42897 — CVSS 9.8 (critical): Array Networks AG/vxAG with ArrayOS AG before 9.4.0.469 allows unauthenticated command injection that leads to privilege escalation and…
• CVE-2023-28461 — CVSS 9.8 (critical) — actively exploited: Array Networks Array AG Series and vxAG (9.4.0.481 and earlier) allow remote code execution. An attacker can browse the filesystem on the…
• CVE-2023-51707 — CVSS 9.8 (critical): MotionPro in Array ArrayOS AG before 9.4.0.505 on AG and vxAG allows remote command execution via crafted packets. AG and vxAG 9.3.0.259.x…
• CVE-2023-41121 — CVSS 7.5 (high): Array AG OS before 9.4.0.499 allows denial of service: remote attackers can cause system service processes to crash through abnormal HTTP…
• CVE-2025-66644 — CVSS 7.2 (high) — actively exploited: Array Networks ArrayOS AG before 9.4.5.9 allows command injection, as exploited in the wild in August through December 2025.
• CVE-2023-24613 — CVSS 4.9 (medium): The user interface of Array Networks AG Series and vxAG through 9.4.0.470 could allow a remote attacker to use the gdb tool to overwrite…