CVE-2021-40870criticalunder attack

CVE-2021-40870

Published · Updated

Follow this CVE+ Monitor Controller

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.8epss 93%
from disclosure to weapon24 days
Published on NVDSep 13
1st PoC+24d
CISA KEV+127d
Action required by CISAfederal deadline: 2022-02-01

Apply updates per vendor instructions.

In short

The Aviatrix Controller allows anyone, without logging in, to upload dangerous files that can execute arbitrary code on the server. This happens because the system doesn't properly validate file types or prevent directory traversal attacks.

Technical detail

Aviatrix Controller 6.x before 6.5-1804.1922 suffers from an unauthenticated arbitrary file upload vulnerability combined with directory traversal. An attacker can bypass file type restrictions and write malicious files to arbitrary locations on the filesystem, achieving remote code execution without requiring authentication.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.