Extreme Vulnérabilités

Chronologie

Taper

Not Defined	31

Produit

Extreme Networks ExtremeWireless WiNG	11
Extreme EXOS	6
Extreme Networks Switch Engine	4
Extreme Networks AP410C	2
Extreme Networks HiveOS	1

Contre-mesures

Official Fix	20
Temporary Fix	0
Workaround	0
Unavailable	1
Not Defined	10

Exploitabilité

High	1
Functional	0
Proof-of-Concept	1
Unproven	0
Not Defined	29

Vecteur d'accès

Not Defined	0
Physical	0
Local	4
Adjacent	8
Network	19

Authentification

Not Defined	0
High	4
Low	7
None	20

Interaction de l'utilisateur

Not Defined	0
Required	6
None	25

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	1
≤5	4
≤6	4
≤7	12
≤8	6
≤9	4
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	2
≤5	4
≤6	4
≤7	12
≤8	5
≤9	4
≤10	0

VulDB

≤1	0
≤2	0
≤3	1
≤4	1
≤5	9
≤6	6
≤7	3
≤8	6
≤9	5
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	5
≤7	6
≤8	7
≤9	3
≤10	2

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Fournisseur

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploiter 0 jour

<1k	8
<2k	13
<5k	10
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploiter aujourd'hui

<1k	31
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploiter le volume du marché

🔴 CTI Activités

Affected Products (12): AP410C (2), EAC Appliance (1), EXOS (6), Extreme Management Center (1), Extreme Search (1), ExtremeWireless Aerohive HiveOS (1), HiveOS (1), IQ Engine (2), Management Center (1), Networks ExtremeWireless WiNG (11), Nuke Evolution Xtreme (1), Switch Engine (4)

Publié	Base	Temp	Vulnérabilité	Prod	Exp	Con	EPSS	CTI	CVE
12/12/2023	8.8	8.4	Extreme Networks HiveOS ah_auth buffer overflow	Inconnue	Not Defined	Official Fix	0.00000	0.00	CVE-2023-46272
12/12/2023	8.8	8.4	Extreme Networks AP410C ah_webui authentification faible	Inconnue	Not Defined	Official Fix	0.00000	0.00	CVE-2023-46271
16/10/2023	6.5	6.4	Extreme Networks Switch Engine API jsonrpc cross site request forgery	Inconnue	Not Defined	Official Fix	0.00058	0.00	CVE-2023-43118
16/10/2023	7.1	7.0	Extreme Networks Switch Engine HTTP Request Privilege Escalation	Inconnue	Not Defined	Official Fix	0.00050	0.00	CVE-2023-43120
16/10/2023	6.5	6.4	Extreme Networks Switch Engine Chalet Application directory traversal	Inconnue	Not Defined	Official Fix	0.00090	0.03	CVE-2023-43121
16/10/2023	7.6	7.5	Extreme Networks Switch Engine Redis Server elévation de privilèges	Inconnue	Not Defined	Official Fix	0.00091	0.03	CVE-2023-43119
04/08/2023	8.8	8.4	Extreme Networks AP410C buffer overflow	Inconnue	Not Defined	Official Fix	0.00162	0.01	CVE-2023-35803
15/07/2023	8.0	7.9	Extreme IQ Engine CAPWAP Protocol buffer overflow	Inconnue	Not Defined	Official Fix	0.00302	0.03	CVE-2023-35802
15/11/2021	8.8	8.8	Extreme Networks ExtremeWireless Aerohive HiveOS/IQ Engine NetConfig UI Administrative Interface elévation de privilèges	Inconnue	Not Defined	Not Defined	0.85139	0.02	CVE-2020-16152
05/08/2020	5.2	5.2	Extreme EAC Appliance Reflected cross site scripting	Inconnue	Not Defined	Not Defined	0.00095	0.00	CVE-2020-13819

21 plus d'entrées ne sont pas affichées

🔒 Login Required

You need to signup and login to see more of the remaining 21 results.

◂ PrécédentAperçuSuivant ▸

Do you know our Splunk app?

Download it now for free!