Lucene search
K

CVE-2024-50603

🗓️ 08 Jan 2025 00:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 13 Media mentions👁 269 Views🌐 WEB

Vulnerability in Aviatrix Controller allows code execution via OS command injection by unauthenticated users.

Related
Detection
Affected
Refs
Paths
Social
NVD
Vulners
CNA
Node
aviatrixcontrollerRange<7.1.4191
OR
aviatrixcontrollerRange7.27.2.4996
[
  {
    "defaultStatus": "unaffected",
    "product": "Controller",
    "vendor": "Aviatrix",
    "versions": [
      {
        "lessThan": "7.1.4191",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "7.2.4996",
        "status": "affected",
        "version": "7.2.0",
        "versionType": "custom"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
cloud_typequery paramv1/apiCommand injection via improper neutralization in list_flightpath_destination_instances.CWE-78
src_cloud_typequery paramv1/apiCommand injection via improper neutralization in flightpath_connection_test.CWE-78
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 08:04Current
9.8High risk
Vulners AI Score9.8
CVSS 3.19.8 - 10
EPSS0.98545
SSVC
269