VULNERABILITY INTELLIGENCE
CVE-2021-31776
CVSS score7.8 HIGH
EPSS probability0.31%
CISA KEVNot currently listed
Published2021-04-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the SYSTEM user, if the machine is misconfigured to allow unprivileged users to write to directories that are supposed to be restricted to administrators.
Weakness classification
- nvd@nist.gov: CWE-428
Primary references
- cve@mitre.org — Product, Vendor Advisory
- cve@mitre.org — Product, Vendor Advisory
- cve@mitre.org — Release Notes, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Product, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Product, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Vendor Advisory