Aviatrix records
21 published records for vendor aviatrix.
Researcher profile
- Entered KEV
- 2 · 9.5%
- Weaponized
- 2 · 9.5%
- Pre-auth RCE
- 2
- With a fix record
- 9.5%
- Median publish → KEV
- 68 days
Recurring classes
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-732 Incorrect Permission Assignment for Critical Resource2
- CWE-276 Incorrect Default Permissions1
- CWE-287 Improper Authentication1
- CWE-312 Cleartext Storage of Sensitive Information1
- CWE-330 Use of Insufficiently Random Values1
The weakness classes this vendor ships most often: where to look.
CWEAll records
21 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
99Now | CVE-2024-50603Weaponized | An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996.aviatrix · controller · CWE-78 | Critical9.8 | KEV | 98.5% | Jan 7, 2025 |
97Now | CVE-2021-40870Weaponized | An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922.aviatrix · controller · CWE-23 | Critical9.8 | KEV | 93.0% | Sep 13, 2021 |
40Plan | CVE-2020-7224No exploit | The Aviatrix OpenVPN client through 2.5.7 on Linux, macOS, and Windows is vulnerable when OpenSSL parameters are altered from the issued valaviatrix · openvpn | Critical9.8 | — | 2.3% | Apr 16, 2020 |
40Plan | CVE-2020-13417No exploit | An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomplete fix for CVE-2020-7224.aviatrix · controller | Critical9.8 | — | 2.2% | May 22, 2020 |
40Plan | CVE-2020-26553No exploit | An issue was discovered in Aviatrix Controller before R6.0.2483.aviatrix · controller · CWE-434 | Critical9.8 | — | 1.7% | Nov 17, 2020 |
35Monitor | CVE-2020-26548No exploit | An issue was discovered in Aviatrix Controller before R5.4.1290.aviatrix · controller | High8.8 | — | 1.4% | Nov 17, 2020 |
35Monitor | CVE-2022-38368No exploit | An issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376.aviatrix · gateway · CWE-287 | High8.8 | — | 0.7% | Aug 15, 2022 |
35Monitor | CVE-2020-13412No exploit | An issue was discovered in Aviatrix Controller before 5.4.1204.aviatrix · controller · CWE-352 | High8.8 | — | 0.5% | May 22, 2020 |
31Monitor | CVE-2019-17387No exploit | An authentication flaw in the AVPNC_RP service in Aviatrix VPN Client through 2.2.10 allows an attacker to gain elevated privileges through aviatrix · vpn client | High7.8 | — | 0.7% | Dec 5, 2019 |
31Monitor | CVE-2019-17388No exploit | Weak file permissions applied to the Aviatrix VPN Client through 2.2.10 installation directory on Windows and Linux allow a local attacker taviatrix · vpn client · CWE-732 | High7.8 | — | 0.5% | Dec 5, 2019 |
31Monitor | CVE-2021-31776No exploit | Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the SYSTEM user, if theaviatrix · vpn client · CWE-428 | High7.8 | — | 0.3% | Apr 28, 2021 |
30Monitor | CVE-2020-27568No exploit | Insecure File Permissions exist in Aviatrix Controller 5.3.1516.aviatrix · controller · CWE-732 | High7.5 | — | 1.5% | Apr 21, 2021 |
30Monitor | CVE-2020-26549No exploit | An issue was discovered in Aviatrix Controller before R5.4.1290.aviatrix · controller · CWE-552 | High7.5 | — | 1.5% | Nov 17, 2020 |
30Monitor | CVE-2020-26550No exploit | An issue was discovered in Aviatrix Controller before R5.3.1151.aviatrix · controller · CWE-330 | High7.5 | — | 1.4% | Nov 17, 2020 |
30Monitor | CVE-2020-13414No exploit | An issue was discovered in Aviatrix Controller before 5.4.1204.aviatrix · controller · CWE-798 | High7.5 | — | 1.4% | May 22, 2020 |
30Monitor | CVE-2020-26552No exploit | An issue was discovered in Aviatrix Controller before R6.0.2483.aviatrix · controller | High7.5 | — | 1.1% | Nov 17, 2020 |
30Monitor | CVE-2020-26551No exploit | An issue was discovered in Aviatrix Controller before R5.3.1151.aviatrix · controller · CWE-312 | High7.5 | — | 0.9% | Nov 17, 2020 |
30Monitor | CVE-2020-27569No exploit | Arbitrary File Write exists in Aviatrix VPN Client 2.8.2 and earlier.aviatrix · openvpn · CWE-276 | High7.5 | — | 0.9% | Apr 21, 2021 |
30Monitor | CVE-2020-13415No exploit | An issue was discovered in Aviatrix Controller through 5.1.aviatrix · controller · CWE-347 | High7.5 | — | 0.7% | May 22, 2020 |
26Monitor | CVE-2020-13416No exploit | An issue was discovered in Aviatrix Controller before 5.4.1066.aviatrix · controller · CWE-352 | Medium6.5 | — | 0.5% | May 22, 2020 |
21Monitor | CVE-2020-13413No exploit | An issue was discovered in Aviatrix Controller before 5.4.1204.aviatrix · controller · CWE-203 | Medium5.3 | — | 1.3% | May 22, 2020 |
- CVE-2024-5060399Now
An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996.
CriticalCVSS 9.8KEVWeaponizedEPSS 98%aviatrix · controllerJan 7, 2025
- CVE-2021-4087097Now
An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922.
CriticalCVSS 9.8KEVWeaponizedEPSS 93%aviatrix · controllerSep 13, 2021
- CVE-2020-722440Plan
The Aviatrix OpenVPN client through 2.5.7 on Linux, macOS, and Windows is vulnerable when OpenSSL parameters are altered from the issued val
CriticalCVSS 9.8No exploitEPSS 2%aviatrix · openvpnApr 16, 2020
- CVE-2020-1341740Plan
An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomplete fix for CVE-2020-7224.
CriticalCVSS 9.8No exploitEPSS 2%aviatrix · controllerMay 22, 2020
- CVE-2020-2655340Plan
An issue was discovered in Aviatrix Controller before R6.0.2483.
CriticalCVSS 9.8No exploitEPSS 1%aviatrix · controllerNov 17, 2020
- CVE-2020-2654835Monitor
An issue was discovered in Aviatrix Controller before R5.4.1290.
HighCVSS 8.8No exploitEPSS 1%aviatrix · controllerNov 17, 2020
- CVE-2022-3836835Monitor
An issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376.
HighCVSS 8.8No exploitEPSS 0%aviatrix · gatewayAug 15, 2022
- CVE-2020-1341235Monitor
An issue was discovered in Aviatrix Controller before 5.4.1204.
HighCVSS 8.8No exploitEPSS 0%aviatrix · controllerMay 22, 2020
- CVE-2019-1738731Monitor
An authentication flaw in the AVPNC_RP service in Aviatrix VPN Client through 2.2.10 allows an attacker to gain elevated privileges through
HighCVSS 7.8No exploitEPSS 0%aviatrix · vpn clientDec 5, 2019
- CVE-2019-1738831Monitor
Weak file permissions applied to the Aviatrix VPN Client through 2.2.10 installation directory on Windows and Linux allow a local attacker t
HighCVSS 7.8No exploitEPSS 0%aviatrix · vpn clientDec 5, 2019
- CVE-2021-3177631Monitor
Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the SYSTEM user, if the
HighCVSS 7.8No exploitEPSS 0%aviatrix · vpn clientApr 28, 2021
- CVE-2020-2756830Monitor
Insecure File Permissions exist in Aviatrix Controller 5.3.1516.
HighCVSS 7.5No exploitEPSS 1%aviatrix · controllerApr 21, 2021
- CVE-2020-2654930Monitor
An issue was discovered in Aviatrix Controller before R5.4.1290.
HighCVSS 7.5No exploitEPSS 1%aviatrix · controllerNov 17, 2020
- CVE-2020-2655030Monitor
An issue was discovered in Aviatrix Controller before R5.3.1151.
HighCVSS 7.5No exploitEPSS 1%aviatrix · controllerNov 17, 2020
- CVE-2020-1341430Monitor
An issue was discovered in Aviatrix Controller before 5.4.1204.
HighCVSS 7.5No exploitEPSS 1%aviatrix · controllerMay 22, 2020
- CVE-2020-2655230Monitor
An issue was discovered in Aviatrix Controller before R6.0.2483.
HighCVSS 7.5No exploitEPSS 1%aviatrix · controllerNov 17, 2020
- CVE-2020-2655130Monitor
An issue was discovered in Aviatrix Controller before R5.3.1151.
HighCVSS 7.5No exploitEPSS 0%aviatrix · controllerNov 17, 2020
- CVE-2020-2756930Monitor
Arbitrary File Write exists in Aviatrix VPN Client 2.8.2 and earlier.
HighCVSS 7.5No exploitEPSS 0%aviatrix · openvpnApr 21, 2021
- CVE-2020-1341530Monitor
An issue was discovered in Aviatrix Controller through 5.1.
HighCVSS 7.5No exploitEPSS 0%aviatrix · controllerMay 22, 2020
- CVE-2020-1341626Monitor
An issue was discovered in Aviatrix Controller before 5.4.1066.
MediumCVSS 6.5No exploitEPSS 0%aviatrix · controllerMay 22, 2020
- CVE-2020-1341321Monitor
An issue was discovered in Aviatrix Controller before 5.4.1204.
MediumCVSS 5.3No exploitEPSS 1%aviatrix · controllerMay 22, 2020