CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-09-13
Aviatrix Controller 6.x Unauthenticated Remote Code Execution (RCE) and Directory Traversal Vulnerability (CVE-2021-40870) Analysis & Mitigation Guide
[Affected Scope] Aviatrix Controller 6.x versions prior to 6.5-1804.1922
[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges by exploiting directory traversal and unrestricted file upload vulnerabilities
[Mitigation] Immediately upgrade Aviatrix Controller to version 6.5-1804.1922 or later, and restrict external access to the management interface