CVE-2019-17388

PoC —

CVSS 3.1

7.8 high

EPSS

<1%p45

Published

Dec 5, 2019 (Dec 5, 2019)

Modified

Jun 17, 2026

Description

Weak file permissions applied to the Aviatrix VPN Client through 2.2.10 installation directory on Windows and Linux allow a local attacker to execute arbitrary code by gaining elevated privileges through file modifications.

Vendors: aviatrix
Products: vpn client
Weakness: CWE-732
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.