Priority MEDIUM 64
Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 fail to sanitize user input prior to passing the input to command line utilities, allowing command injection via special characters in filenames
CVSS 4.0MEDIUM 6.6· Network · High privileges · No interaction · EPSS 0.12223 · Published 2025-06-23 · Fixed in 7.1.4208, 7.2.5090 +1 CWE-78
Priority HIGH 67
Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 do not enforce rate limiting on password reset attempts, allowing adversaries to brute force guess the 6-digit password reset PIN
CVSS 4.0HIGH 7.8· Network · No auth · No interaction · EPSS 0.00477 · Published 2025-06-23 · Fixed in 7.1.4208, 7.2.5090 +1 CWE-307
Priority CRITICAL 100KEV
An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.98518 · Published 2025-01-08 · Fixed in 7.1.4191, 7.2.4996 CWE-78
Priority MEDIUM 40
An issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00813 · Published 2022-08-15 · No fix listed CWE-287
Priority CRITICAL 100KEV
An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.93019 · Published 2021-09-13 · No fix listed CWE-23
Priority LOW 34
Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the SYSTEM user, if the machine is misconfigured to allow unprivileged users to write to directories th…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00314 · Published 2021-04-29 · No fix listed CWE-428
Priority LOW 35
Arbitrary File Write exists in Aviatrix VPN Client 2.8.2 and earlier.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.009 · Published 2021-04-21 · No fix listed CWE-276
Priority LOW 36
Insecure File Permissions exist in Aviatrix Controller 5.3.1516.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01561 · Published 2021-04-21 · No fix listed CWE-732
Priority MEDIUM 46
An issue was discovered in Aviatrix Controller before R6.0.2483.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01764 · Published 2020-11-17 · No fix listed CWE-434
Priority LOW 35
An issue was discovered in Aviatrix Controller before R6.0.2483.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01177 · Published 2020-11-17 · No fix listed
Priority LOW 35
An issue was discovered in Aviatrix Controller before R5.3.1151.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0092 · Published 2020-11-17 · No fix listed CWE-312
Priority LOW 36
An issue was discovered in Aviatrix Controller before R5.3.1151.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01479 · Published 2020-11-17 · No fix listed CWE-330
Priority LOW 36
An issue was discovered in Aviatrix Controller before R5.4.1290.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01506 · Published 2020-11-17 · No fix listed CWE-552
Priority MEDIUM 41
An issue was discovered in Aviatrix Controller before R5.4.1290.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01459 · Published 2020-11-17 · No fix listed
Priority LOW 39
An issue was discovered in Aviatrix Controller before 5.4.1204.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00583 · Published 2020-05-22 · No fix listed CWE-352
Priority LOW 27
An issue was discovered in Aviatrix Controller before 5.4.1204.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01369 · Published 2020-05-22 · No fix listed CWE-203
Priority LOW 36
An issue was discovered in Aviatrix Controller before 5.4.1204.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01466 · Published 2020-05-22 · No fix listed CWE-798
Priority LOW 34
An issue was discovered in Aviatrix Controller through 5.1.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00747 · Published 2020-05-22 · No fix listed CWE-347
Priority LOW 29
An issue was discovered in Aviatrix Controller before 5.4.1066.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0051 · Published 2020-05-22 · No fix listed CWE-352
Priority MEDIUM 46
An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomplete fix for CVE-2020-7224.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02257 · Published 2020-05-22 · No fix listed
Priority MEDIUM 46
The Aviatrix OpenVPN client through 2.5.7 on Linux, macOS, and Windows is vulnerable when OpenSSL parameters are altered from the issued value set; the parameters could allow unauthorized third-party libraries to load.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02308 · Published 2020-04-16 · No fix listed
Priority LOW 35
Weak file permissions applied to the Aviatrix VPN Client through 2.2.10 installation directory on Windows and Linux allow a local attacker to execute arbitrary code by gaining elevated privileges through file modificatio…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.0057 · Published 2019-12-05 · No fix listed CWE-732
Priority LOW 35
An authentication flaw in the AVPNC_RP service in Aviatrix VPN Client through 2.2.10 allows an attacker to gain elevated privileges through arbitrary code execution on Windows, Linux, and macOS.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00722 · Published 2019-12-05 · No fix listed
THREATIST.IORead the docs