VYPR
← All advisories
High severity8.8NVD Advisory· Published Aug 15, 2022· Updated Jun 17, 2026

CVE-2022-38368

CVE-2022-38368

Description

An issue was discovered in Aviatrix Gateway before 6.6.5712 and 6.7.x before 6.7.1376. Because Gateway API functions mishandle authentication, an authenticated VPN user can inject arbitrary commands.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Aviatrix/Gateway2 versions
    cpe:2.3:a:aviatrix:gateway:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:aviatrix:gateway:*:*:*:*:*:*:*:*range: <6.6.5712
    • (no CPE)range: <6.6.5712, <6.7.1376
  • Aviatrix/Gatewaydescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.