CVE-2021-40870Aviatrix Controller Unrestricted Upload of File

An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal.

9.8 CRITICALEPSS 93.01%⚡ Known Exploited (CISA KEV)NVD: Published

Last updated: 2025-10-21 23:25 UTC

Overview Affected Products References

NVD CVE.org

Overview

Severity

Score	Severity	Version	Vector String
9.8	CRITICAL	3.1CISA-ADP	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CVE ID: CVE-2021-40870
Status: Published
Assigner (CNA): mitre
Published: Sep 13, 2021
Last modified: 2025-10-21 23:25 UTC
Weaknesses: CWE-25
CWE-96

Sources

NVD (unavailable at last refresh)
CVE.org
CISA KEV
FIRST EPSS

Refreshed hourly from the sources above. Last fetched 2026-11-07 14:13 UTC.