Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Arraynetworks

First CVE: Oct 13, 2022Active for: 4 yearsTotal CVEs: 7

Arraynetworks manufactures a narrow line of network security appliances, including models such as the AG1000 and VX AG series, that serve as critical chokepoints for enterprise network access and traffic filtering. Vulnerabilities affecting this vendor skew strongly toward critical-severity outcomes and have a strong, recurring history of confirmed in-the-wild exploitation, with the exposure concentrated in command-injection, authentication-bypass, and OS-command-injection weaknesses that reflect the appliance's privileged role in network defense. Defenders should prioritize remediation of this vendor's disclosures and restrict management access to these devices; live severity and exploitation counts are shown alongside this summary.

FAUCET AI Generated
7
Total CVEs
More Total CVEs than 88% of tracked vendors
0.1
Avg CVEs / Product / Year
Bottom 1%
8.4
Avg CVSS Score
Higher Avg CVSS Score than 81% of tracked vendors
28.6%
In CISA KEV
Higher KEV Rate than 100% of tracked vendors

Trends Over Time

The number and severity of CVEs published that impact products developed by Arraynetworks over time

Volume of CVEsAvg CVSS Base Score
First CVE
Oct 13, 2022
3 years ago
Most Recent CVE
Dec 5, 2025
231 days ago

Products(38 total)

Top CVEs

Signals from CVEs in this vendor scope (7 CVEs).

7 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2023-28461CRITICAL
Array Networks Array AG Series and vxAG (9.4.0.481 and earlier) allow remote code execution. An attacker can browse the filesystem on the SSL VPN gateway using a flags attribute in
Mar 15, 20239.892YESNO
CVE-2025-66644CRITICAL
Array Networks ArrayOS AG before 9.4.5.9 allows command injection, as exploited in the wild in August through December 2025.
Dec 5, 20259.875YESNO
CVE-2022-42897CRITICAL
Array Networks AG/vxAG with ArrayOS AG before 9.4.0.469 allows unauthenticated command injection that leads to privilege escalation and control of the system. NOTE: ArrayOS AG 10.x
Oct 13, 20229.831NONO
CVE-2023-51707CRITICAL
MotionPro in Array ArrayOS AG before 9.4.0.505 on AG and vxAG allows remote command execution via crafted packets. AG and vxAG 9.3.0.259.x are unaffected.
Dec 22, 20239.826NONO
CVE-2023-41121HIGH
Array AG OS before 9.4.0.499 allows denial of service: remote attackers can cause system service processes to crash through abnormal HTTP operations.
Aug 25, 20237.520NONO
CVE-2023-28460HIGH
A command injection vulnerability was discovered in Array Networks APV products. A remote attacker can send a crafted packet after logging into the affected appliance as an adminis
Mar 15, 20237.219NONO
CVE-2023-24613MEDIUM
The user interface of Array Networks AG Series and vxAG through 9.4.0.470 could allow a remote attacker to use the gdb tool to overwrite the backend function call stack after acces
Feb 3, 20234.919NONO
View all 7 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products7 CVEs
14%
29%
57%
Severity distribution among all CVEs352,294 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network7 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low7 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None7 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High2 (28.6%)
None5 (71.4%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (7 CVEs).

CISA KEV
2 CVEs
28.6% of CVEs· 100th percentile
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Arraynetworks.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Arraynetworks — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Arraynetworks's Products

View all 1 CNAs →

Top CWEs