CVE-2021-40870

highpriority · act · 90OT risk · criticalKEV · exploitedEPSS 0.930 · 100 %ileexploit · PoCEURUUS

grimoire priorityP0 · Act now

Exploitable?

Yes · in the wild

CISA KEV · 4 exploits · PoC

Likely / severe?

93.0% (100th) EPSS

CVSS 7.5 · high

Is it mine?

9 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · nvd

added 2022-01-18remediate by 2022-02-01

required action Apply updates per vendor instructions.

EPSS · scored 2026-10-22

Aviatrix Controller Unrestricted Upload of File

An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal.

cvss

Technical severity, 0–10. One row per scoring source.

9.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 7.5–9.8

v2.07.5highAV:N/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 10 · impact 6.4

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 5.9

v3.19.8criticalAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondaryexploitability 3.9 · impact 5.9

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Hsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: active · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-23USprimaryCWE-22USCWE-436US

exploits (4)

Public proof-of-concept and weaponised exploit code.

affected products (9)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
Aviatrix Systems, Inc. Aviatrix Controller6.2 → 1804.2043fstec_bduRU
Aviatrix Systems, Inc. Aviatrix Controller6.3 → 1804.2490fstec_bduRU
Aviatrix Systems, Inc. Aviatrix Controller6.4 → 1804.2838fstec_bduRU
Aviatrix Systems, Inc. Aviatrix Controller6.5 → 1804.1922fstec_bduRU
aviatrix controller6.2 → 6.2.2043nvdUScpe:2.3:a:aviatrix:controller:*:*:*:*:*:*:*:*
aviatrix controller6.3 → 6.3.2490nvdUScpe:2.3:a:aviatrix:controller:*:*:*:*:*:*:*:*
aviatrix controller6.4 → 6.4.2838nvdUScpe:2.3:a:aviatrix:controller:*:*:*:*:*:*:*:*
aviatrix controller6.5 → 6.5.1922nvdUScpe:2.3:a:aviatrix:controller:*:*:*:*:*:*:*:*

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu nvd NVD CVE.org MITRE

published 2021-09-13modified 2026-06-17

related (612)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-76519US	critical9.8OT critical	1.57% (75th)	KEV	2026-10-14
A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the under…
CVE-2026-34926US	—OT critical	0.54% (44th)	KEV	2026-05-21
A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code…
CVE-2025-64446US	—OT critical	92.0% (100th)	KEV	2025-11-14
A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0 through 7.2.11, FortiWe…
CVE-2024-27199US	high7.3OT critical	100.0% (100th)	KEV	2024-03-04
In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible
CVE-2023-38950US	high7.5OT critical	92.5% (100th)	KEV	2023-08-03
A path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read arbitrary files via supplying a crafted payload. This vulnerabili…

+607 more

references (11)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan