Vulnerability scan finds CVE-2024-3596 & CVE-2025-5914 present on Aria Automation servers

Products

• VCF Automation

Issue/Introduction

Customer doing vulnerability scan with Tenable software finds CVE-2024-3596 & CVE-2025-5914 present.

Tenable Plugin 241383 and 241156 are referenced in the scans.

Environment

Aria Automation 8.18.1

Cause

Software packages Libarchive and Kerberos present in the Aria Automation appliances were found to have potential vulnerabilities

Resolution

VMware By Broadcom is aware of CVE-2024-3596 & CVE-2025-5914.

Please refer to the release notes for existing and forthcoming product releases for any updates in relation to this CVE.

Should you require further information please contact Broadcom Support.