CVE-2024-50603 Scanner
CVE-2024-50603 Scanner - Remote Code Execution vulnerability in aviatrix controller
Used 2.9k times · 5.9k assets checked · domain, ipv4, subdomain
🔴
CISA Known Exploited Vulnerability
This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.
CVE
CVE-2024-50603
9.8
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. Due to the improper neutralization of special elements used in an OS command, an unauthenticated attacker is able to execute arbitrary code. Shell metacharacters can be sent to /v1/api in cloud_type for list_flightpath_destination_instances, or src_cloud_type for flightpath_connection_test.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
controller
Updated Sep 14, 2026View on NVD →
S4E scanner
CVE history: controller
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →