Vulnerabilities > CVE-2020-13417 - Unspecified vulnerability in Aviatrix Controller and Gateway

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

aviatrix

critical

NVD

Published: 2020-05-22

Updated: 2021-09-16

Summary

An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomplete fix for CVE-2020-7224. This affects Linux, macOS, and Windows installations for certain OpenSSL parameters.

Vulnerable Configurations

Part	Description	Count
Application	Aviatrix Aviatrix Controller 2.5 Aviatrix Controller 2.6 Aviatrix Controller 2.7 Aviatrix Controller 3.0 Aviatrix Controller 3.1 Aviatrix Controller 3.2 Aviatrix Controller 3.3 Aviatrix Controller 3.4 Aviatrix Controller 3.5 Aviatrix Controller 4.0 Aviatrix Controller 4.1.914 Aviatrix Controller 4.1.946 Aviatrix Controller 4.2.634 Aviatrix Controller 4.2.740 Aviatrix Controller 4.2.764 Aviatrix Controller 4.3.1230 Aviatrix Controller 4.3.1262 Aviatrix Controller 4.3.1275 Aviatrix Controller 4.6.587 Aviatrix Controller 4.7.378 Aviatrix Controller 4.7.419 Aviatrix Controller 4.7.473 Aviatrix Controller 4.7.494 Aviatrix Controller 4.7.501 Aviatrix Controller 4.7.581 Aviatrix Controller 4.7.590 Aviatrix Controller 5.0.2667 Aviatrix Controller 5.0.2754 Aviatrix Controller 5.0.2768 Aviatrix Controller 5.0.2773 Aviatrix Controller 5.0.2782 Aviatrix Controller 5.1.842 Aviatrix Controller 5.1.845 Aviatrix Controller 5.1.935 Aviatrix Controller 5.1.943 Aviatrix Controller 5.1.962 Aviatrix Controller 5.1.969 Aviatrix Controller 5.1.973 Aviatrix Controller 5.1.989 Aviatrix Controller 5.1.1016 Aviatrix Controller 5.1.1183 Aviatrix Controller 5.2.1991 Aviatrix Controller 5.2.2011 Aviatrix Controller 5.2.2047 Aviatrix Controller 5.2.2071 Aviatrix Controller 5.2.2092 Aviatrix Controller 5.2.2122 Aviatrix Gateway - Aviatrix Gateway 2.5 Aviatrix Gateway 2.6 Aviatrix Gateway 2.7 Aviatrix Gateway 3.0 Aviatrix Gateway 3.1 Aviatrix Gateway 3.2 Aviatrix Gateway 3.3 Aviatrix Gateway 3.4 Aviatrix Gateway 3.5 Aviatrix Gateway 4.0 Aviatrix Gateway 5.0.2667 Aviatrix VPN Client - Aviatrix VPN Client 1.0 Aviatrix VPN Client 1.1 Aviatrix VPN Client 1.2 Aviatrix VPN Client 1.3 Aviatrix VPN Client 1.4 Aviatrix VPN Client 1.5 Aviatrix VPN Client 1.6 Aviatrix VPN Client 1.7 Aviatrix VPN Client 1.8 Aviatrix VPN Client 1.9 Aviatrix VPN Client 1.10.6 Aviatrix VPN Client 2.0.3 Aviatrix VPN Client 2.1.3 Aviatrix VPN Client 2.2.10 Aviatrix VPN Client 2.3.10 Aviatrix VPN Client 2.4.10 Aviatrix VPN Client 2.5.7 Aviatrix VPN Client 2.8.2	78
OS	Apple Apple Macos -	1
OS	Linux Linux Linux Kernel -	1
OS	Microsoft Microsoft Windows -	1

Summary

Vulnerable Configurations

References