Read the docs

Aviatrix

Records23All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9

Exploited now

Aviatrix records in CISA KEV
TI-2024-34029 Aviatrix Controllers OS Command Injection Vulnerability Priority CRITICAL 100KEV 2025-01-16TI-2021-17791 Aviatrix Controller Unrestricted Upload of File Priority CRITICAL 100KEV 2022-01-18

Components

Products in the NVD configurations · select one to filter the records
Controller 15 records CRITICAL Vpn Client 5 records MEDIUM Gateway 3 records MEDIUM Openvpn 2 records MEDIUM

Records

5 records in Vpn Client · all components

TI-2019-12983 CVE-2019-17388 · GHSA-467r-c55c-h73q

Weak file permissions applied to the Aviatrix VPN Client through 2.2.10 installation…

Priority LOW 35

Weak file permissions applied to the Aviatrix VPN Client through 2.2.10 installation directory on Windows and Linux allow a local attacker to execute arbitrary code by gaining elevated privileges through file modificatio…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0057 Published 2019-12-05 No fix listed CWE-732
TI-2021-11780 CVE-2021-31776 · GHSA-5m6v-4w72-r82q

Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables…

Priority LOW 34

Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the SYSTEM user, if the machine is misconfigured to allow unprivileged users to write to directories th…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00314 Published 2021-04-29 No fix listed CWE-428
Open these records in search →