Hackers Exploit Aviatrix Controller Vulnerability to Deploy Backdoors and Crypto Miners
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-50603 | Unauthenticated OS Command Injection (RCE) in Aviatrix Controller | 9.8 | 99% | KEVPoC | KEV |
From the original article
3 min read at thehackernews.com
Ravie Lakshmanan Jan 13, 2025 Vulnerability / Cloud Security A recently disclosed critical security flaw impacting the Aviatrix Controller cloud networking platform has come under active exploitation in the wild to deploy backdoors and cryptocurrency miners. Cloud security firm Wiz said it's currently responding to "multiple incidents" involving the weaponization of CVE-2024-50603 (CVSS score: 10.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.