NetSight
medium6.6

CVE-2025-2172

Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 fail to sanitize user input prior to passing the input to command line utilities, allowing …

Impact

Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 fail to sanitize user input prior to passing the input to command line utilities, allowing command injection via special characters in filenames

Affected products

ProductAffected versions
Aviatrix Controller
before 7.1.4208

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References