CVE-2021-40870 Aviatrix Aviatrix Controller
Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal.
- CVSS
- not scored
On CISA’s exploited list
Aviatrix Controller Unrestricted Upload of File
- Added
- 2022-01-18
- Federal patch deadline
- 2022-02-01
- Ransomware use
- not known