Hackers Strike Gold: Aviatrix Controller Flaw Fuels Backdoor and Crypto-Mining Frenzy
Threat actors are exploiting a critical Aviatrix Controller flaw, CVE-2024-50603, to deploy backdoors and cryptocurrency miners. Unauthenticated attackers can execute arbitrary code, leading to privilege escalation in AWS. Patch your systems immediately to avoid becoming a cryptojacking victim while funding someone’s virtual shopping spree.
Hot Take:
Looks like the Aviatrix Controller forgot to lock its backdoor, letting in unwanted guests with a penchant for cryptomining and a flair for mischief! Time to patch up and show these digital squatters the way out!
Key Points:
- A critical vulnerability, CVE-2024-50603, was found in Aviatrix Controller, with a severity rating of 10.0.
- The flaw enables unauthenticated attackers to execute arbitrary code via the API.
- Threat actors are exploiting the flaw to deploy backdoors and cryptocurrency miners.
- Aviatrix has released patches to address the vulnerability in versions 7.1.4191 and 7.2.4996.
- Approximately 3% of cloud enterprise environments may be affected, with a significant potential for privilege escalation.
Already a member? Log in here