CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-38368

An issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376. Because Gateway API functions mishandle authentication, an authenticated VPN user can inject arbitrary commands.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 62.1%

CVSS Severity

CVSS v3 Score 8.8

References

Products affected by CVE-2022-38368

Aviatrix » Gateway » Version: N/A

cpe:2.3:a:aviatrix:gateway:-
Aviatrix » Gateway » Version: 2.5

cpe:2.3:a:aviatrix:gateway:2.5
Aviatrix » Gateway » Version: 2.6

cpe:2.3:a:aviatrix:gateway:2.6
Aviatrix » Gateway » Version: 2.7

cpe:2.3:a:aviatrix:gateway:2.7
Aviatrix » Gateway » Version: 3.0

cpe:2.3:a:aviatrix:gateway:3.0
Aviatrix » Gateway » Version: 3.1

cpe:2.3:a:aviatrix:gateway:3.1
Aviatrix » Gateway » Version: 3.2

cpe:2.3:a:aviatrix:gateway:3.2
Aviatrix » Gateway » Version: 3.3

cpe:2.3:a:aviatrix:gateway:3.3
Aviatrix » Gateway » Version: 3.4

cpe:2.3:a:aviatrix:gateway:3.4
Aviatrix » Gateway » Version: 3.5

cpe:2.3:a:aviatrix:gateway:3.5
Aviatrix » Gateway » Version: 4.0

cpe:2.3:a:aviatrix:gateway:4.0
Aviatrix » Gateway » Version: 5.0.2667

cpe:2.3:a:aviatrix:gateway:5.0.2667
Aviatrix » Gateway » Version: 5.3

cpe:2.3:a:aviatrix:gateway:5.3
Aviatrix » Gateway » Version: 5.4.1204

cpe:2.3:a:aviatrix:gateway:5.4.1204
Aviatrix » Gateway » Version: 6.3.2092

cpe:2.3:a:aviatrix:gateway:6.3.2092
Aviatrix » Gateway » Version: 6.3.2548

cpe:2.3:a:aviatrix:gateway:6.3.2548
Aviatrix » Gateway » Version: 6.3.2551

cpe:2.3:a:aviatrix:gateway:6.3.2551
Aviatrix » Gateway » Version: 6.4.2783

cpe:2.3:a:aviatrix:gateway:6.4.2783
Aviatrix » Gateway » Version: 6.4.2791

cpe:2.3:a:aviatrix:gateway:6.4.2791
Aviatrix » Gateway » Version: 6.4.2830

cpe:2.3:a:aviatrix:gateway:6.4.2830
Aviatrix » Gateway » Version: 6.4.2859

cpe:2.3:a:aviatrix:gateway:6.4.2859
Aviatrix » Gateway » Version: 6.4.2945

cpe:2.3:a:aviatrix:gateway:6.4.2945
Aviatrix » Gateway » Version: 6.4.2973

cpe:2.3:a:aviatrix:gateway:6.4.2973
Aviatrix » Gateway » Version: 6.4.2995

cpe:2.3:a:aviatrix:gateway:6.4.2995
Aviatrix » Gateway » Version: 6.4.3008

cpe:2.3:a:aviatrix:gateway:6.4.3008
Aviatrix » Gateway » Version: 6.4.3015

cpe:2.3:a:aviatrix:gateway:6.4.3015
Aviatrix » Gateway » Version: 6.4.3049

cpe:2.3:a:aviatrix:gateway:6.4.3049
Aviatrix » Gateway » Version: 6.4.3057

cpe:2.3:a:aviatrix:gateway:6.4.3057
Aviatrix » Gateway » Version: 6.5.1905

cpe:2.3:a:aviatrix:gateway:6.5.1905
Aviatrix » Gateway » Version: 6.5.1922

cpe:2.3:a:aviatrix:gateway:6.5.1922
Aviatrix » Gateway » Version: 6.5.2608

cpe:2.3:a:aviatrix:gateway:6.5.2608
Aviatrix » Gateway » Version: 6.5.2613

cpe:2.3:a:aviatrix:gateway:6.5.2613
Aviatrix » Gateway » Version: 6.5.2721

cpe:2.3:a:aviatrix:gateway:6.5.2721
Aviatrix » Gateway » Version: 6.5.2835

cpe:2.3:a:aviatrix:gateway:6.5.2835
Aviatrix » Gateway » Version: 6.5.2898

cpe:2.3:a:aviatrix:gateway:6.5.2898
Aviatrix » Gateway » Version: 6.5.3006

cpe:2.3:a:aviatrix:gateway:6.5.3006
Aviatrix » Gateway » Version: 6.5.3012

cpe:2.3:a:aviatrix:gateway:6.5.3012
Aviatrix » Gateway » Version: 6.5.3166

cpe:2.3:a:aviatrix:gateway:6.5.3166
Aviatrix » Gateway » Version: 6.5.3233

cpe:2.3:a:aviatrix:gateway:6.5.3233
Aviatrix » Gateway » Version: 6.6.5224

cpe:2.3:a:aviatrix:gateway:6.6.5224
Aviatrix » Gateway » Version: 6.6.5230

cpe:2.3:a:aviatrix:gateway:6.6.5230
Aviatrix » Gateway » Version: 6.6.5404

cpe:2.3:a:aviatrix:gateway:6.6.5404
Aviatrix » Gateway » Version: 6.6.5409

cpe:2.3:a:aviatrix:gateway:6.6.5409
Aviatrix » Gateway » Version: 6.6.5413

cpe:2.3:a:aviatrix:gateway:6.6.5413
Aviatrix » Gateway » Version: 6.6.5545

cpe:2.3:a:aviatrix:gateway:6.6.5545
Aviatrix » Gateway » Version: 6.6.5612

cpe:2.3:a:aviatrix:gateway:6.6.5612
Aviatrix » Gateway » Version: 6.6.5662

cpe:2.3:a:aviatrix:gateway:6.6.5662
Aviatrix » Gateway » Version: 6.6.5667

cpe:2.3:a:aviatrix:gateway:6.6.5667
Aviatrix » Gateway » Version: 6.7.0

cpe:2.3:a:aviatrix:gateway:6.7.0
Aviatrix » Gateway » Version: 6.7.1185

cpe:2.3:a:aviatrix:gateway:6.7.1185
Aviatrix » Gateway » Version: 6.7.1186

cpe:2.3:a:aviatrix:gateway:6.7.1186
Aviatrix » Gateway » Version: 6.7.1319

cpe:2.3:a:aviatrix:gateway:6.7.1319
Aviatrix » Gateway » Version: 6.7.1324

cpe:2.3:a:aviatrix:gateway:6.7.1324
Aviatrix » Gateway » Version: 6.7.1325

cpe:2.3:a:aviatrix:gateway:6.7.1325

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-38368

Products

Pricing

Contact Us