Extreme Vulnerabilidades

Curso de tempo

Tipo

Not Defined31

Produto

Extreme Networks ExtremeWireless WiNG11
Extreme EXOS6
Extreme Networks Switch Engine4
Extreme Networks AP410C2
Extreme Networks HiveOS1

Medidas

Official Fix20
Temporary Fix0
Workaround0
Unavailable1
Not Defined10

Explorabilidade

High1
Functional0
Proof-of-Concept1
Unproven0
Not Defined29

Tipo de acesso

Not Defined0
Physical0
Local4
Adjacent8
Network19

Autenticação

Not Defined0
High4
Low7
None20

Actividade do utilizador

Not Defined0
Required6
None25

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤41
≤54
≤64
≤712
≤86
≤94
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤54
≤64
≤712
≤85
≤94
≤100

VulDB

≤10
≤20
≤31
≤41
≤59
≤66
≤73
≤86
≤95
≤100

NVD

≤10
≤20
≤30
≤40
≤52
≤65
≤76
≤87
≤93
≤102

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Fabricante

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explorar 0 dia

<1k8
<2k13
<5k10
<10k0
<25k0
<50k0
<100k0
≥100k0

Explorar hoje

<1k31
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explorar o volume do mercado

🔴 CTI Actividades

Affected Products (12): AP410C (2), EAC Appliance (1), EXOS (6), Extreme Management Center (1), Extreme Search (1), ExtremeWireless Aerohive HiveOS (1), HiveOS (1), IQ Engine (2), Management Center (1), Networks ExtremeWireless WiNG (11), Nuke Evolution Xtreme (1), Switch Engine (4)

Publicado emBaseTempVulnerabilidadeProdExpMasEPSSCTICVE
12/12/20238.88.4Extreme Networks HiveOS ah_auth Excesso de tampãoDesconhecidoNot DefinedOfficial Fix0.000000.00CVE-2023-46272
12/12/20238.88.4Extreme Networks AP410C ah_webui Fraca autenticaçãoDesconhecidoNot DefinedOfficial Fix0.000000.00CVE-2023-46271
16/10/20236.56.4Extreme Networks Switch Engine API jsonrpc Falsificação de Pedido Cross SiteDesconhecidoNot DefinedOfficial Fix0.000580.00CVE-2023-43118
16/10/20237.17.0Extreme Networks Switch Engine HTTP Request Privilege EscalationDesconhecidoNot DefinedOfficial Fix0.000500.00CVE-2023-43120
16/10/20236.56.4Extreme Networks Switch Engine Chalet Application Directório TraversalDesconhecidoNot DefinedOfficial Fix0.000900.03CVE-2023-43121
16/10/20237.67.5Extreme Networks Switch Engine Redis Server direitos alargadosDesconhecidoNot DefinedOfficial Fix0.000910.03CVE-2023-43119
04/08/20238.88.4Extreme Networks AP410C Excesso de tampãoDesconhecidoNot DefinedOfficial Fix0.001620.01CVE-2023-35803
15/07/20238.07.9Extreme IQ Engine CAPWAP Protocol Excesso de tampãoDesconhecidoNot DefinedOfficial Fix0.003020.03CVE-2023-35802
15/11/20218.88.8Extreme Networks ExtremeWireless Aerohive HiveOS/IQ Engine NetConfig UI Administrative Interface direitos alargadosDesconhecidoNot DefinedNot Defined0.851390.02CVE-2020-16152
05/08/20205.25.2Extreme EAC Appliance Reflected Roteiro Cruzado de SítiosDesconhecidoNot DefinedNot Defined0.000950.00CVE-2020-13819

21 as entradas adicionais não são mais exibidas

🔒 Login Required

You need to signup and login to see more of the remaining 21 results.

◂ VoltarVisão GeralPróximo ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!