PT-2020-13526 · Aviatrix · Aviatrix Controller

Published 2020-05-22 · Updated 2021-12-01 · CVE-2020-13414

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Aviatrix Controller versions prior to 5.4.1204

Description An issue was discovered in the software where it contains unused credentials.

Recommendations For versions prior to 5.4.1204, update to version 5.4.1204 or later to resolve the issue.

Exploit

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2020-13414

Affected Products

Aviatrix Controller

References · 6

• 🔥 https://criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix · Exploit
• https://docs.aviatrix.com/HowTos/security_bulletin_article.html#clean-up-old-code · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-13414 · Security Note
• https://osv.dev/vulnerability/CVE-2020-13414 · Vendor Advisory
• https://t.me/cvenotify/4027 · Telegram Post
• https://t.me/cvenotify/5736 · Telegram Post