CyberRota Analysis
AI-GeneratedVMware Avi Load Balancer is vulnerable to a remote code execution flaw that allows an attacker with network access to compromise the Avi Control plane and execute arbitrary code. This high-severity vulnerability (CVSS 8.7) affects multiple versions of the product, and organizations using these versions should prioritize patching to mitigate potential exploitation risks. Immediate action is recommended for all users of the affected versions to ensure the security of their network infrastructure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious user with network access may be able to access the Avi Control plane and execute code remotely. Affected versions: 32.1.1 (fixed in 32.1.2) 31.1.1 through 31.2.2 (fixed in 31.2.2-2p3) 30.1.1 through 30.2.6 (fixed in 30.2.7) 22.1.1 through 22.1.7 (fixed in 30.2.7)