Recently modified exploited vulnerabilities for "aviatrix controller"

Where

AND

Sort:

Versions

Aviatrix ControllersAviatrix Controllers OS Command Injection Vulnerability

Risk 100

Severity

Exploited

Command Injection, OS Command Injection

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. Due to the improper neutralization of special elements used in an OS command, an unauthenticated attacker is able to execute arbitrary code. Shell metacharacters can be sent to /v1/api in cloudtype for listflightpathdestinationinstances, or srccloudtype for flightpathconnectiontest.

1 / 2

Source: NVD

First published (updated )

CVE-2024-50603

Aviatrix Aviatrix ControllerAviatrix Controller Unrestricted Upload of File

Risk 99

Severity

9.8

Exploited

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal.

1 / 2

First published (updated )

CVE-2021-40870

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.