cvedb.io
CVE-2021-31776
HIGH · CVSS 7.8
EPSS exploitation probability: 0%
Published 2021-04-29T01:15:08.083 · Last modified 2026-06-17T03:52:13.140

Summary

Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the SYSTEM user, if the machine is misconfigured to allow unprivileged users to write to directories that are supposed to be restricted to administrators.

Affected products

aviatrix — vpn_client

Does this affect you?

Add your gear to cvedb and we'll alert you only when aviatrix ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.