Aviatrix 2

Organization

CVE-2024-50603: Aviatrix Controllers OS Command Injection Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Jan 16, 2025

Aviatrix Controllers contain an OS command injection vulnerability that could allow an unauthenticated attacker to execute arbitrary code. Shell metacharacters can be sent to /v1/api in cloud_type for list_flightpath_destination_instances, or...

Vulnerabilities & Patching

CVE-2021-40870: Aviatrix Controller Unrestricted Upload of File

Known Exploited Vulnerabilities CISA KEV Catalog Jan 18, 2022

Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal.

Vulnerabilities & Patching