TI-2024-34029 CVE-2024-50603 · GHSA-2vqc-674h-xh9w
OS command injection in Aviatrix Controller
Priority CRITICAL 100KEV
An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996.
Aviatrix
Records23All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9
Exploited now
Aviatrix records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsRecords
23 records
TI-2021-17791 CVE-2021-40870 · GHSA-w7mg-q4hh-m9cq
An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922.
Priority CRITICAL 100KEV
An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922.
TI-2025-01903 CVE-2025-2171 · GHSA-fhf7-g3jp-w7f7
Missing brute-force protection in Aviatrix Controller
Priority HIGH 67
Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 do not enforce rate limiting on password reset attempts, allowing adversaries to brute force guess the 6-digit password reset PIN
TI-2025-01904 CVE-2025-2172 · GHSA-wr65-2r27-crgw
OS command injection in Aviatrix Controller
Priority MEDIUM 64
Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 fail to sanitize user input prior to passing the input to command line utilities, allowing command injection via special characters in filenames
TI-2020-16187 CVE-2020-26553 · GHSA-w7fp-868g-8q36
An issue was discovered in Aviatrix Controller before R6.0.2483.
Priority MEDIUM 46
An issue was discovered in Aviatrix Controller before R6.0.2483.
TI-2020-10521 CVE-2020-13417 · GHSA-gfx3-chv9-3c94
An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7…
Priority MEDIUM 46
An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomplete fix for CVE-2020-7224.
TI-2020-05833 CVE-2020-7224 · GHSA-2w3j-7x55-5cx2
The Aviatrix OpenVPN client through 2.5.7 on Linux, macOS, and Windows is vulnerable when…
Priority MEDIUM 46
The Aviatrix OpenVPN client through 2.5.7 on Linux, macOS, and Windows is vulnerable when OpenSSL parameters are altered from the issued value set; the parameters could allow unauthorized third-party libraries to load.
TI-2020-16182 CVE-2020-26548 · GHSA-jx7f-hrpq-3gjg
An issue was discovered in Aviatrix Controller before R5.4.1290.
Priority MEDIUM 41
An issue was discovered in Aviatrix Controller before R5.4.1290.
TI-2022-17995 CVE-2022-38368 · GHSA-583q-h2h6-7284
An issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376.
Priority MEDIUM 40
An issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376.
TI-2020-10516 CVE-2020-13412 · GHSA-g5j7-gmmc-8wj6
An issue was discovered in Aviatrix Controller before 5.4.1204.
Priority LOW 39
An issue was discovered in Aviatrix Controller before 5.4.1204.
TI-2020-16707 CVE-2020-27568 · GHSA-5967-3m2h-jxrg
Insecure File Permissions exist in Aviatrix Controller 5.3.1516.
Priority LOW 36
Insecure File Permissions exist in Aviatrix Controller 5.3.1516.
TI-2020-16184 CVE-2020-26550 · GHSA-hx64-qv2g-ph4q
An issue was discovered in Aviatrix Controller before R5.3.1151.
Priority LOW 36
An issue was discovered in Aviatrix Controller before R5.3.1151.
TI-2020-16183 CVE-2020-26549 · GHSA-r93w-724g-3j3h
An issue was discovered in Aviatrix Controller before R5.4.1290.
Priority LOW 36
An issue was discovered in Aviatrix Controller before R5.4.1290.
TI-2020-10518 CVE-2020-13414 · GHSA-23p3-rx33-wm34
An issue was discovered in Aviatrix Controller before 5.4.1204.
Priority LOW 36
An issue was discovered in Aviatrix Controller before 5.4.1204.
TI-2020-16708 CVE-2020-27569 · GHSA-hm8q-rqmm-26hq
Arbitrary File Write exists in Aviatrix VPN Client 2.8.2 and earlier.
Priority LOW 35
Arbitrary File Write exists in Aviatrix VPN Client 2.8.2 and earlier.
TI-2020-16186 CVE-2020-26552 · GHSA-5fhf-qx23-f7hx
An issue was discovered in Aviatrix Controller before R6.0.2483.
Priority LOW 35
An issue was discovered in Aviatrix Controller before R6.0.2483.
TI-2020-16185 CVE-2020-26551 · GHSA-vgvv-hj3p-69r2
An issue was discovered in Aviatrix Controller before R5.3.1151.
Priority LOW 35
An issue was discovered in Aviatrix Controller before R5.3.1151.
TI-2019-12983 CVE-2019-17388 · GHSA-467r-c55c-h73q
Weak file permissions applied to the Aviatrix VPN Client through 2.2.10 installation…
Priority LOW 35
Weak file permissions applied to the Aviatrix VPN Client through 2.2.10 installation directory on Windows and Linux allow a local attacker to execute arbitrary code by gaining elevated privileges through file modificatio…
TI-2019-12982 CVE-2019-17387 · GHSA-fc49-wm87-9q8m
An authentication flaw in the AVPNC_RP service in Aviatrix VPN Client through 2.2.10…
Priority LOW 35
An authentication flaw in the AVPNC_RP service in Aviatrix VPN Client through 2.2.10 allows an attacker to gain elevated privileges through arbitrary code execution on Windows, Linux, and macOS.
TI-2021-11780 CVE-2021-31776 · GHSA-5m6v-4w72-r82q
Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables…
Priority LOW 34
Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the SYSTEM user, if the machine is misconfigured to allow unprivileged users to write to directories th…
TI-2020-10519 CVE-2020-13415 · GHSA-8w2r-w7pw-v78c
An issue was discovered in Aviatrix Controller through 5.1.
Priority LOW 34
An issue was discovered in Aviatrix Controller through 5.1.
TI-2020-10520 CVE-2020-13416 · GHSA-53jf-8wq6-r7jr
An issue was discovered in Aviatrix Controller before 5.4.1066.
Priority LOW 29
An issue was discovered in Aviatrix Controller before 5.4.1066.
TI-2020-10517 CVE-2020-13413 · GHSA-8c4p-575f-fq4h
An issue was discovered in Aviatrix Controller before 5.4.1204.
Priority LOW 27
An issue was discovered in Aviatrix Controller before 5.4.1204.