Hackers exploit critical Aviatrix Controller RCE flaw in attacks

Aviatrix Controller instances are affected by a critical unauthenticated RCE (CVE-2024-50603) that allows command injection via API actions; a public PoC has been published and threat actors have used the flaw to install Sliver backdoors and XMRig cryptominers. Aviatrix has released fixes (upgrade paths to 7.1.4191 or 7.2.4996) and recommends not exposing port 443 publicly and following Controller IP access guidelines to reduce risk.