Wiz Research Identifies Exploitation in the Wild of Aviatrix Controller RCE (CVE-2024-50603)
wiz.io | vulnerability | CVE-2024-50603 | #cloud | #rce | #aws | #exploitation | #vulnerability | #aviatrix | #cve-2024-50603
Summary
Wiz Research observed in-the-wild exploitation of CVE-2024-50603 (CVSS 10.0), an unauthenticated Aviatrix Controller RCE allowing AWS control-plane privilege escalation; patched in 7.1.4191/7.2.4996.
- CVE
- CVE-2024-50603
- Published
- Collected
--- id: 7069 title: "Wiz Research Identifies Exploitation in the Wild of Aviatrix Controller RCE (CVE-2024-50603)" cve: CVE-2024-50603 source_domain: wiz.io source_url: "https://www.wiz.io/blog/wiz-research-identifies-exploitation-in-the-wild-of-aviatrix-cve-2024-50603" published_at: "2025-01-11T17:23:53Z" tags: ["cloud", "rce", "aws", "exploitation", "vulnerability", "aviatrix", "cve-2024-50603"] phying_url: "https://phying.com/item/7069" lang: en --- # Wiz Research Identifies Exploitation in the Wild of Aviatrix Controller RCE (CVE-2024-50603) ## Summary Wiz Research observed in-the-wild exploitation of CVE-2024-50603 (CVSS 10.0), an unauthenticated Aviatrix Controller RCE allowing AWS control-plane privilege escalation; patched in 7.1.4191/7.2.4996. ## Intelligence Metadata - **Sources:** wiz.io - **CVE:** CVE-2024-50603 - **Published:** 2025-01-11T17:23:53Z - **Original:** https://www.wiz.io/blog/wiz-research-identifies-exploitation-in-the-wild-of-aviatrix-cve-2024-50603 - **Phying News:** https://phying.com/item/7069