Extreme Vulnerabilità

Sequenza temporale

Genere

Not Defined31

Prodotto

Extreme Networks ExtremeWireless WiNG11
Extreme EXOS6
Extreme Networks Switch Engine4
Extreme Networks AP410C2
Extreme Networks HiveOS1

Contromisure

Official Fix20
Temporary Fix0
Workaround0
Unavailable1
Not Defined10

Sfruttabilità

High1
Functional0
Proof-of-Concept1
Unproven0
Not Defined29

Accesso al vettore

Not Defined0
Physical0
Local4
Adjacent8
Network19

Autenticazione

Not Defined0
High4
Low7
None20

Interazione dell'utente

Not Defined0
Required6
None25

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤41
≤54
≤64
≤712
≤86
≤94
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤54
≤64
≤712
≤85
≤94
≤100

VulDB

≤10
≤20
≤31
≤41
≤59
≤66
≤73
≤86
≤95
≤100

NVD

≤10
≤20
≤30
≤40
≤52
≤65
≤76
≤87
≤93
≤102

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Fornitore

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 giorni

<1k8
<2k13
<5k10
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploiter aujourd'hui

<1k31
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Sfrutta il volume del mercato

🔴 CTI Attività

Affected Products (12): AP410C (2), EAC Appliance (1), EXOS (6), Extreme Management Center (1), Extreme Search (1), ExtremeWireless Aerohive HiveOS (1), HiveOS (1), IQ Engine (2), Management Center (1), Networks ExtremeWireless WiNG (11), Nuke Evolution Xtreme (1), Switch Engine (4)

Data di pubblicazioneBaseTempVulnerabilitàProdSfrConEPSSCTICVE
12/12/20238.88.4Extreme Networks HiveOS ah_auth buffer overflowSconosciutoNot DefinedOfficial Fix0.000000.00CVE-2023-46272
12/12/20238.88.4Extreme Networks AP410C ah_webui autenticazione deboleSconosciutoNot DefinedOfficial Fix0.000000.08CVE-2023-46271
16/10/20236.56.4Extreme Networks Switch Engine API jsonrpc cross site request forgerySconosciutoNot DefinedOfficial Fix0.000580.04CVE-2023-43118
16/10/20237.17.0Extreme Networks Switch Engine HTTP Request Privilege EscalationSconosciutoNot DefinedOfficial Fix0.000500.00CVE-2023-43120
16/10/20236.56.4Extreme Networks Switch Engine Chalet Application directory traversalSconosciutoNot DefinedOfficial Fix0.000900.06CVE-2023-43121
16/10/20237.67.5Extreme Networks Switch Engine Redis Server escalazione di privilegiSconosciutoNot DefinedOfficial Fix0.000910.03CVE-2023-43119
04/08/20238.88.4Extreme Networks AP410C buffer overflowSconosciutoNot DefinedOfficial Fix0.001620.01CVE-2023-35803
15/07/20238.07.9Extreme IQ Engine CAPWAP Protocol buffer overflowSconosciutoNot DefinedOfficial Fix0.003020.03CVE-2023-35802
15/11/20218.88.8Extreme Networks ExtremeWireless Aerohive HiveOS/IQ Engine NetConfig UI Administrative Interface escalazione di privilegiSconosciutoNot DefinedNot Defined0.851390.02CVE-2020-16152
05/08/20205.25.2Extreme EAC Appliance Reflected cross site scriptingSconosciutoNot DefinedNot Defined0.000950.04CVE-2020-13819

21 non vengono visualizzate più voci

🔒 Login Required

You need to signup and login to see more of the remaining 21 results.

◂ PrecedenteVisione D'insiemeIl prossimo ▸

Might our Artificial Intelligence support you?

Check our Alexa App!