Vulnerabilities > Aviatrix > VPN Client
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-04-29 | CVE-2021-31776 | Unquoted Search Path or Element vulnerability in Aviatrix VPN Client Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the SYSTEM user, if the machine is misconfigured to allow unprivileged users to write to directories that are supposed to be restricted to administrators. | 7.8 |
| 2020-05-22 | CVE-2020-13417 | Unspecified vulnerability in Aviatrix Controller and Gateway An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomplete fix for CVE-2020-7224. | 9.8 |
| 2020-05-22 | CVE-2020-13413 | Information Exposure Through Discrepancy vulnerability in Aviatrix Controller An issue was discovered in Aviatrix Controller before 5.4.1204. | 5.3 |
| 2019-12-05 | CVE-2019-17388 | Incorrect Permission Assignment for Critical Resource vulnerability in Aviatrix VPN Client Weak file permissions applied to the Aviatrix VPN Client through 2.2.10 installation directory on Windows and Linux allow a local attacker to execute arbitrary code by gaining elevated privileges through file modifications. | 7.8 |
| 2019-12-05 | CVE-2019-17387 | Unspecified vulnerability in Aviatrix VPN Client An authentication flaw in the AVPNC_RP service in Aviatrix VPN Client through 2.2.10 allows an attacker to gain elevated privileges through arbitrary code execution on Windows, Linux, and macOS. | 7.8 |