Hackers Exploit Aviatrix Controller Vulnerability to Deploy Backdoors and Crypto Miners
The Aviatrix Controller cloud networking product has a recently discovered severe security weakness that is being actively exploited in the wild to install cryptocurrency miners and backdoors.
The maximum severity vulnerability CVE-2024-50603 (CVSS score: 10.0), which might lead to unauthenticated remote code execution, has been weaponized, according to cloud security company Wiz, which stated it is presently reacting to "multiple incidents" using this vulnerability.
In other words, if the vulnerability is successfully exploited, it may allow an attacker to insert malicious operating system commands since some API endpoints fail to sufficiently sanitize user-supplied input read more about Hackers Exploit Aviatrix Controller Vulnerability to Deploy Backdoors and Crypto Miners.
Get...