- Vendor / Project
- Aviatrix
- Product
- Aviatrix Controller
- Date added
- Jan 18, 2022
- Due date
- Feb 1, 2022
- Known ransomware use
- Unknown
- CWEs
- CWE-25, CWE-96
Description
Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal.
Required action
Apply updates per vendor instructions.