Vulnerabilities (CVE)

Filtered by vendor Aviatrix Subscribe
Filtered by product Gateway
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-38368 1 Aviatrix 1 Gateway 2024-11-21 N/A 8.8 HIGH
An issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376. Because Gateway API functions mishandle authentication, an authenticated VPN user can inject arbitrary commands.
CVE-2020-13417 4 Apple, Aviatrix, Linux and 1 more 6 Macos, Controller, Gateway and 3 more 2024-11-21 7.5 HIGH 9.8 CRITICAL
An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomplete fix for CVE-2020-7224. This affects Linux, macOS, and Windows installations for certain OpenSSL parameters.
CVE-2020-13414 1 Aviatrix 2 Controller, Gateway 2024-11-21 5.0 MEDIUM 7.5 HIGH
An issue was discovered in Aviatrix Controller before 5.4.1204. It contains credentials unused by the software.