CVE-2025-2172: OS Command Injection
Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 fail to sanitize user input prior to passing the input to command line utilities, allowing command injection via special characters in filenames
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2172?
CVE-2025-2172 has been classified as a high severity vulnerability due to its potential for command injection, which could allow an attacker to execute arbitrary commands.
How do I fix CVE-2025-2172?
To remediate CVE-2025-2172, users should upgrade to Aviatrix Controller versions 7.1.4208, 7.2.5090, or 8.0.0 or later.
What are the affected versions for CVE-2025-2172?
Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 are affected by CVE-2025-2172.
What is command injection in the context of CVE-2025-2172?
In the context of CVE-2025-2172, command injection occurs when user input is improperly sanitized, allowing attackers to execute arbitrary system commands via special characters in filenames.
Who is impacted by CVE-2025-2172?
Organizations using affected versions of the Aviatrix Controller are at risk from CVE-2025-2172 due to the command injection vulnerability.