PT-2020-16453 · Aviatrix · Aviatrix Controller

Published 2020-11-17 · Updated 2021-07-21 · CVE-2020-26550

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Aviatrix Controller versions prior to R5.3.1151

Description An issue was discovered in Aviatrix Controller where an encrypted file containing credentials to unrelated systems is protected by a three-character key.

Recommendations For Aviatrix Controller versions prior to R5.3.1151, update to version R5.3.1151 or later to resolve the issue.

Exploit

Fix

Use of Insufficiently Random Values

Weakness Enumeration

CWE-330

Related Identifiers

CVE-2020-26550

Affected Products

Aviatrix Controller

References · 5

• 🔥 https://criticalstart.com/multiple-vulnerabilities-discovered-in-aviatrix · Exploit
• https://osv.dev/vulnerability/CVE-2020-26550 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-26550 · Security Note
• https://t.me/cvenotify/5740 · Telegram Post
• https://t.me/cibsecurity/16484 · Telegram Post