Aviatrix Cloud Controller Flaw Enables Remote Code Execution via Authentication Bypass

Keypoints

• The vulnerabilities allow attackers to gain administrative control over Aviatrix cloud management systems.
• The authentication bypass exploits a weak password reset mechanism with a 6-digit token that remains valid for 15 minutes.
• Successful exploitation was demonstrated after 16 hours of brute-force attempts on the default “admin” account.
• Post-authentication, the command injection flaw enables remote code execution with root privileges.
• Aviatrix has issued patches and advises immediate updates and restricts public controller access to mitigate risks.