Lucene search
HistoryAug 15, 2022 - 10:15 p.m.
CVE-2022-38368
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
42.8%
An issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376. Because Gateway API functions mishandle authentication, an authenticated VPN user can inject arbitrary commands.
Affected configurations
Node
aviatrixgatewayRange<6.6.5712
ORaviatrixgatewayRange6.7.0–6.7.1376
Related
cve
cve
CVE-2022-38368
2022-08-15 22:15:21
cvelist
cvelist
CVE-2022-38368
2022-08-15 20:59:09
prion
prion
Command injection
2022-08-15 22:15:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
42.8%
Related for NVD:CVE-2022-38368