---
id: 7069
title: "Wiz Research Identifies Exploitation in the Wild of Aviatrix Controller RCE (CVE-2024-50603)"
cve: CVE-2024-50603
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/wiz-research-identifies-exploitation-in-the-wild-of-aviatrix-cve-2024-50603"
published_at: "2025-01-11T17:23:53Z"
tags: ["cloud", "rce", "aws", "exploitation", "vulnerability", "aviatrix", "cve-2024-50603"]
phying_url: "https://phying.com/item/7069"
lang: en
---

# Wiz Research Identifies Exploitation in the Wild of Aviatrix Controller RCE (CVE-2024-50603)

## Summary

Wiz Research observed in-the-wild exploitation of CVE-2024-50603 (CVSS 10.0), an unauthenticated Aviatrix Controller RCE allowing AWS control-plane privilege escalation; patched in 7.1.4191/7.2.4996.

## Intelligence Metadata

- **Sources:** wiz.io
- **CVE:** CVE-2024-50603
- **Published:** 2025-01-11T17:23:53Z
- **Original:** https://www.wiz.io/blog/wiz-research-identifies-exploitation-in-the-wild-of-aviatrix-cve-2024-50603
- **Phying News:** https://phying.com/item/7069