Aviatrix Controller Unrestricted Upload of File. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 18/01/2022. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| controller | ≥ 6.2, < 6.2.2043≥ 6.3, < 6.3.2490≥ 6.4, < 6.4.2838≥ 6.5, < 6.5.1922 | 6.2.20436.3.24906.4.28386.5.1922 |
An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free