Aviatrix
Security incidents tagged Aviatrix. Newest first.
0 Aviatrix incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 1
- Live
- 0
- Patched
- 1
- Days without an incident
- 644
- Longest quiet run: 644 days (Jan 17–Oct 22)
Show 1 older incident1 older incident
January 2025 1
CriticalAviatrix Controllers: Controllers OS Command Injection VulnerabilityPatched
Aviatrix Controllers Patched
Aviatrix Controllers contain an OS command injection vulnerability that could allow an unauthenticated attacker to execute arbitrary code. Shell metacharacters can be sent to /v1/api in cloud_type for list_flightpath_destination_instances, or src_cloud_type for flightpath_connection_test. Added to CISA KEV on 2025-01-16.
Open incident →CVE-2024-50603
