Threat Advisories - NVD Disclosed September 13, 2021

CVE-2021-40870

Aviatrix Controller Code Execution Vulnerability.

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

An unrestricted file upload vulnerability in Aviatrix Controller allows unauthenticated users to execute arbitrary code via directory traversal. This poses a business risk of operational disruption and data compromise.

NVD published: September 13, 2021 • CISA KEV