AV
Vendor
Aviatrix
29
CVEs
4
On KEV
0
New 30D
Products
CO9.8
Controller
Aviatrix
17 CVEs2 on KEV0 new
AC9.8
Aviatrix Controller
Aviatrix
1 CVEs1 on KEV0 new
CO9.8
Controllers
Aviatrix
1 CVEs1 on KEV0 new
VC9.8
Vpn Client
Aviatrix
5 CVEs0 on KEV0 new
GA9.8
Gateway
Aviatrix
3 CVEs0 on KEV0 new
OP9.8
Openvpn
Aviatrix
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-2172 | CO Controller Aviatrix | 6.6 | Jun 23 | Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 fail to sanitize user input prior to passing the input to command line utilities, allowing command injection… |
| CVE-2025-2171 | CO Controller Aviatrix | 7.8 | Jun 23 | Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 do not enforce rate limiting on password reset attempts, allowing adversaries to brute force guess the 6-digit… |
| CVE-2024-50603 In wildKEV | CO Controller Aviatrix | 9.8 | Jan 8 | Aviatrix Controllers OS Command Injection Vulnerability |
| CVE-2022-38368 | GA Gateway Aviatrix | 8.8 | Aug 15 | An issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376 |
| CVE-2021-40870 In wildKEV | CO Controller Aviatrix | 9.8 | Sep 13 | Aviatrix Controller Unrestricted Upload of File |
| CVE-2021-31776 | VC Vpn Client Aviatrix | 7.8 | Apr 29 | Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the SYSTEM user, if the machine is misconfigured to allow… |
| CVE-2020-27569 | OP Openvpn Aviatrix | 7.5 | Apr 21 | Arbitrary File Write exists in Aviatrix VPN Client 2.8.2 and earlier |
| CVE-2020-27568 | CO Controller Aviatrix | 7.5 | Apr 21 | Insecure File Permissions exist in Aviatrix Controller 5.3.1516 |
| CVE-2020-26553 | CO Controller Aviatrix | 9.8 | Nov 17 | An issue was discovered in Aviatrix Controller before R6.0.2483 |
| CVE-2020-26552 | CO Controller Aviatrix | 7.5 | Nov 17 | An issue was discovered in Aviatrix Controller before R6.0.2483 |
| CVE-2020-26551 | CO Controller Aviatrix | 7.5 | Nov 17 | An issue was discovered in Aviatrix Controller before R5.3.1151 |
| CVE-2020-26550 | CO Controller Aviatrix | 7.5 | Nov 17 | An issue was discovered in Aviatrix Controller before R5.3.1151 |
| CVE-2020-26549 | CO Controller Aviatrix | 7.5 | Nov 17 | An issue was discovered in Aviatrix Controller before R5.4.1290 |
| CVE-2020-26548 | CO Controller Aviatrix | 8.8 | Nov 17 | An issue was discovered in Aviatrix Controller before R5.4.1290 |
| CVE-2020-13417 | VC Vpn Client Aviatrix | 9.8 | May 22 | An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomplete fix for CVE-2020-7224 |
| CVE-2020-13416 | CO Controller Aviatrix | 6.5 | May 22 | An issue was discovered in Aviatrix Controller before 5.4.1066 |
| CVE-2020-13415 | CO Controller Aviatrix | 7.5 | May 22 | An issue was discovered in Aviatrix Controller through 5.1 |
| CVE-2020-13414 | CO Controller Aviatrix | 7.5 | May 22 | An issue was discovered in Aviatrix Controller before 5.4.1204 |
| CVE-2020-13413 | VC Vpn Client Aviatrix | 5.3 | May 22 | An issue was discovered in Aviatrix Controller before 5.4.1204 |
| CVE-2020-13412 | CO Controller Aviatrix | 8.8 | May 22 | An issue was discovered in Aviatrix Controller before 5.4.1204 |
| CVE-2020-7224 | OP Openvpn Aviatrix | 9.8 | Apr 16 | The Aviatrix OpenVPN client through 2.5.7 on Linux, macOS, and Windows is vulnerable when OpenSSL parameters are altered from the issued value set; the parameters could allow… |
| CVE-2019-17388 | VC Vpn Client Aviatrix | 7.8 | Dec 5 | Weak file permissions applied to the Aviatrix VPN Client through 2.2.10 installation directory on Windows and Linux allow a local attacker to execute arbitrary code by gaining… |
| CVE-2019-17387 | VC Vpn Client Aviatrix | 7.8 | Dec 5 | An authentication flaw in the AVPNC_RP service in Aviatrix VPN Client through 2.2.10 allows an attacker to gain elevated privileges through arbitrary code execution on Windows,… |