CVE-2020-27569
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Aviatrix Systems Aviatrix VPN Client是美国Aviatrix Systems公司的一款提供SAML身份验证的VPN（虚拟私人网络）客户端应用程序。 Aviatrix VPN Client 2.8.2版本及之前版本存在安全漏洞，该漏洞源于可以利用该位置获得对系统上任何文件的写访问权。
Possible ATT&CK Techniques 1 AI
T1222 · File and Directory Permissions Modification
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2020-27569
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Arbitrary File Write exists in Aviatrix VPN Client 2.8.2 and earlier. The VPN service writes logs to a location that is world writable and can be leveraged to gain write access to any file on the system.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Aviatrix Systems Aviatrix VPN Client 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Aviatrix Systems Aviatrix VPN Client是美国Aviatrix Systems公司的一款提供SAML身份验证的VPN（虚拟私人网络）客户端应用程序。 Aviatrix VPN Client 2.8.2版本及之前版本存在安全漏洞，该漏洞源于可以利用该位置获得对系统上任何文件的写访问权。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2020-27569
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-27569
请登录查看更多情报信息。
Other References for CVE-2020-27569 (1)
Same Patch Batch · n/a · 2021-04-21 · 23 CVEs total
| CVE-2020-23915 | cpp-peglib 缓冲区错误漏洞 | |
| CVE-2020-27568 | Aviatrix Controller 安全漏洞 | |
| CVE-2020-36324 | Bryan Davis analytics-quarry-web 跨站脚本漏洞 | |
| CVE-2020-28973 | ABUS Secvest FUAA50000 信息泄露漏洞 | |
| CVE-2021-31523 | XScreenSaver 安全漏洞 | |
| CVE-2020-23932 | GPAC 代码问题漏洞 | |
| CVE-2020-23931 | GPAC 缓冲区错误漏洞 | |
| CVE-2020-23930 | gpac 代码问题漏洞 | |
| CVE-2020-23928 | GPAC 缓冲区错误漏洞 | |
| CVE-2020-23922 | GIFLIB 缓冲区错误漏洞 | |
| CVE-2020-23921 | fast_ber 缓冲区错误漏洞 | |
| CVE-2020-35980 | GPAC 资源管理错误漏洞 | |
| CVE-2020-23914 | cpp-peglib 代码问题漏洞 | |
| CVE-2020-23912 | Bento4 代码问题漏洞 | |
| CVE-2020-23907 | retdec 缓冲区错误漏洞 | |
| CVE-2021-31327 | RemoteClinic 跨站脚本漏洞 | |
| CVE-2021-31329 | RemoteClinic 跨站脚本漏洞 | |
| CVE-2021-30139 | Alpine Linux apk-tools 缓冲区错误漏洞 | |
| CVE-2020-35982 | GPAC 代码问题漏洞 | |
| CVE-2020-35981 | GPAC 代码问题漏洞 |
Showing top 20 of 23 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2020-27569
No comments yet