CVE-2024-50603

🗣 Aviatrix Controller RCE CVE-2024-50603 Exploited in the Wild: Cryptojacking and Backdoors Deployed https://t.co/WGn2XJCGAZ

Aviatrix Controller RCE CVE-2024-50603 Exploited in the Wild: Cryptojacking and Backdoors Deployed Exploitation of CVE-2024-50603 is already occurring in the wild. Wiz Research observed attackers deploying cryptocurrency miners (XMRig) and backdoors https://t.co/sDyvBKp5UI

Wiz Research Discovers Active Exploitation of Aviatrix Controller RCE (CVE-2024-50603) https://t.co/qDurAZfMBz

⚡CVE-2024-50603: Aviatrix Controller Unauthenticated Command Injection 👉https://t.co/rxgtPPvo6F ✅Join Telegram- https://t.co/V3wk76XHL2 #bugbounty #cvehunter #netlas #nuclei #cybersecurity https://t.co/ntkKaApKPN

Hey all me and @th3sanjai have released CveHunter new exploitation series that exploits CVE-2024-50603 aviatrix controller unauthenticated command injection, here check out our tool: https://t.co/C682sXsrWH https://t.co/8nAOORmqzw

#threatreport #LowCompleteness Wiz Research Identifies Exploitation in the Wild of Aviatrix Controller RCE (CVE-2024-50603). What is CVE-2024-50603? | 12-01-2025 Source: https://t.co/BFPDk13NHc Key details below ↓ 💀Threats: Xmrig_miner, Sliver_c2_tool, 🎯Victims: Aviatrix… htt

Critical RCE vulnerability CVE-2024-50603 in Aviatrix Controller allows unauthenticated command execution. Affected versions risk exploitation, especially in AWS. Prompt upgrades are vital! ⚠️ #Aviatrix #CVE2024 #AWS #ThreatResearch link: https://t.co/5F3uz2wYpG https://t.co/jRc

#RCE attempts targeting Aviatrix Network Controller #CVE-2024-50603 2025-01-11 00:05:44 UTC Source IP: 83.222.191.146 🇧🇬 POST /v1/api IOCs: 83.222.191.91 🇧🇬 hxxp://83.222.191.91/x.sh 435b552095502a5e482905e2ff30a0c9 https://t.co/XjjUdPvjJK

🤡aviatrix deleted their whole documentation because of the vulnerability, i was using it yesterday while they were deleting each page realtime #security #vulnerability #aviatrix CVE-2024-50603 https://t.co/mmmfIrupou

Day 11 - CVE-2024-50603 Potential Exploitation Activity https://t.co/wwb7NW2RqE

Our IR team has been investigating exploitation of CVE-2024-50603 (Aviatrix Controller RCE). So far impact has been limited to cryptojacking, but the Controller's default roles enable control plane privilege escalation to admin, so be sure to patch ASAP. https://t.co/G7afqiiQTL

🚨The new unauthenticated RCE affecting Aviatrix Controllers (CVE-2024-50603) is the real deal - with a single POST request 🫠 and a super trivial exploit, it takes less than 30 seconds to: 1. Collect all Aviatrix Controllers over the internet 2. Validate exploitability with… ht

Critical Command Injection Vulnerability Found in Aviatrix Network Controller (CVE-2024-50603) #JustUnsecure #AFrihackbox https://t.co/1pVpP4CcLN

#Vulnerability #Aviatrix CVE-2024-50603 (CVSS 10): Critical Command Injection Vulnerability in Aviatrix Controller https://t.co/A2vaENsQye

CVE-2024-50603-nuclei-poc Critical Command Injection Vulnerability in Aviatrix Controller https://t.co/qHm4fhbdEd

The discovery of CVE-2024-50603 in Aviatrix Controller versions 7.x-7.2.4820 poses a critical risk due to its command injection vulnerability, allowing unauthenticated remote code execution. With a CVSS score of 10.0, this flaw affects 681 publicly exposed systems, making it c...

#Aviatrix #criticalvulnerabilities #CVEexploits Critical Command Injection Vulnerability Found in Aviatrix Network Controller (CVE-2024-50603) https://t.co/nK426UR558 https://t.co/oE7sTKefH6

🚨Alert🚨 CVE-2024-50603 (CVSS 10): Critical Command Injection Vulnerability in Aviatrix Controller 🔥PoC :https://t.co/ic7UpoIePp 📊 10K+ Services are found on https://t.co/ysWb28BTvF yearly. 🔗Hunter Link:https://t.co/vjkFGhn2LQ 👇Query HUNTER :/product.name="Aviatrix… https://

CVE-2024-50603 denotes a critical vulnerability in the Aviatrix Controller, affecting versions 7.x through 7.2.4820, which enables remote attackers to execute arbitrary commands due to improper input handling in API endpoints. This vulnerability poses significant risk with app...

#exploit 1. CVE-2023-6932, CVE-2023-0461: UaF/LPE in Linux kernel https://t.co/OOfZ4dy95Q 2. CVE-2024-53141: An OOB Write Vulnerability in Netfiler Ipset https://t.co/rVzuElL9KO 3. CVE-2024-50603: Aviatrix Network Controller Command Injection Vulnerability… https://t.co/s0jItYw

🚨🚨🚨Critical Vulnerability Alert: CVE-2024-50603 Critical Command Injection Vulnerability in Aviatrix Controller https://t.co/RaF4f6qVDk

Warning: Critical Command Injection in Aviatrix Controller. #CVE-2024-50603 CVSS: 10. This could potentially lead to remote code execution, unauthorized access and exfiltration of sensitive data, system compromise and lateral movement! #Patch #Patch #Patch https://t.co/LiZoWaCjiF

⚠️⚠️ CVE-2024-50603 (CVSS 10): Critical Command Injection Vulnerability in Aviatrix Controller 🎯3.6k+ Results are found on the https://t.co/pb16tGYaKe nearly year. 🔗FOFA Link:https://t.co/qx6IYqYjED FOFA Query:app="aVIaTrIX-CNTLR" 🔖Refer: https://t.co/I5vfU6bAD3 #OSINT… h

🚨 Critical command injection vulnerability (CVE-2024-50603) in Aviatrix Network Controller patched! Affects versions 7.x - 7.2.4820. 681 exposed instances found. Urgent action needed! 🔒💻 #Aviatrix #RemoteCodeExecution #USA #CybersecurityNews link: https://t.co/A6zRN15cb2 http

Aviatrix Controllerのバージョン7.xから7.2.4820において、OSコマンドの不適切な中和処理（improper neutralization of special elements）が原因で発生するRCE脆弱性 CVE-2024-50603 CVSS9.9 Critical 既にPoCが公開されているためパッチ適用が必須です。 https://t.co/lI50W5itID

Aviatrix Controllerのバージョン7.xから7.2.4820において、OSコマンドの不適切な中和処理（improper neutralization of special elements）が原因で発生するRCE脆弱性 CVE-2024-50603 CVSS10.0 Critical 既にPoCが公開されているためパッチ適用が必須です。 https://t.co/NwqtIpaph1

CVE-2024-50603 An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. Due to the improper neutralization of special elements used in an OS command… https://t.co/xsXU4d8EY9

CVE-2024-50603 (CVSS 10): Critical Command Injection Vulnerability in Aviatrix Controller https://t.co/pHJ1wnN64w

🚨🚨CVE-2024-50603 (CVSS: 10) : Critical Command Injection Vulnerability in Aviatrix Controller ⚠️Due to the improper neutralization of special elements used in an OS command, an unauthenticated attacker is able to execute arbitrary code. ZoomEye Dork👉app="Aviatrix Controller"…

[CVE-2024-50603: CRITICAL] Vulnerability found in Aviatrix Controller allows unauthenticated attackers to run arbitrary code due to improper OS command handling. Update to version 7.1.4191 or 7.2.4996 ASAP.#cybersecurity,#vulnerability https://t.co/1ir2zjWAHh https://t.co/4gisg6u