Exploit for Relative Path Traversal in Aviatrix Controller

🗓️ 07 Oct 2021 17:19:12Reported by 0xAgunType

Aviatrix Controller 6.x before 6.5-1804.1922, Unrestricted file upload, Arbitrary code execution via directory traversal

Reporter	Title	Published	Views	Family All 22
0day.today	Aviatrix Controller 6.x Path Traversal / Code Execution Exploit	12 Oct 202100:00	–	zdt
ATTACKERKB	CVE-2021-40870	13 Sep 202100:00	–	attackerkb
Tenable Nessus	Aviatrix Controller Unrestricted Upload of File (CVE-2021-40870)	29 Oct 202500:00	–	nessus
BDU FSTEC	The vulnerability of the Aviatrix Controller software, a cloud infrastructure management tool, arises from the existence of interpretation conflicts, allowing an attacker to execute arbitrary code.	1 Mar 202300:00	–	bdu_fstec
GithubExploit	Exploit for Relative Path Traversal in Aviatrix Controller	22 Oct 202108:41	–	githubexploit
Circl	CVE-2021-40870	9 Oct 202114:57	–	circl
CISA KEV Catalog	Aviatrix Controller Unrestricted Upload of File	18 Jan 202200:00	–	cisa_kev
CISA	CISA Adds 13 Known Exploited Vulnerabilities to Catalog	18 Jan 202200:00	–	cisa
CNNVD	Aviatrix Controller 代码问题漏洞	13 Sep 202100:00	–	cnnvd
Check Point Advisories	Aviatrix Controller Directory Traversal (CVE-2021-40870)	30 Dec 202100:00	–	checkpoint_advisories

12 Aug 2024 20:17Current

9.9High risk

Vulners AI Score9.9

CVSS 27.5

CVSS 3.19.8

EPSS0.93019