9.8

CVE-2021-40870

Warnung
Exploit
An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Aviatrix ≫ Controller Version >= 6.2 < 6.2.2043
Aviatrix ≫ Controller Version >= 6.3 < 6.3.2490
Aviatrix ≫ Controller Version >= 6.4 < 6.4.2838
Aviatrix ≫ Controller Version >= 6.5 < 6.5.1922

18.01.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

Aviatrix Controller Unrestricted Upload of File

Schwachstelle

Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 93.74% 0.998
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
134c704f-9b21-4f2e-91b3-4a467353bcc0 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-23 Relative Path Traversal

The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.