CVE-2023-35802

EPSS 1.09%
Veröffentlicht 15.07.2023 02:15:08
Zuletzt bearbeitet 21.11.2024 08:08:44
Erkennungen
Login

IQ Engine before 10.6r1 on Extreme Network AP devices has a Buffer Overflow in the implementation of the CAPWAP protocol that may be exploited to obtain elevated privileges to conduct remote code execution. Access to the internal management interface/subnet is required to conduct the exploit.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 2 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Extremenetworks ≫ Iq Engine Version < 10.6r1

   Extremenetworks ≫ Ap122 Version -
   Extremenetworks ≫ Ap130 Version -
   Extremenetworks ≫ Ap150w Version -
   Extremenetworks ≫ Ap250 Version -
   Extremenetworks ≫ Ap30 Version -
   Extremenetworks ≫ Ap3000 Version -
   Extremenetworks ≫ Ap3000x Version -
   Extremenetworks ≫ Ap302w Version -
   Extremenetworks ≫ Ap305c Version -
   Extremenetworks ≫ Ap305c-1 Version -
   Extremenetworks ≫ Ap305cx Version -
   Extremenetworks ≫ Ap4000 Version -
   Extremenetworks ≫ Ap4000-1 Version -
   Extremenetworks ≫ Ap410c Version -
   Extremenetworks ≫ Ap410c-1 Version -
   Extremenetworks ≫ Ap460c Version -
   Extremenetworks ≫ Ap460s12c Version -
   Extremenetworks ≫ Ap460s6c Version -
   Extremenetworks ≫ Ap5010 Version -
   Extremenetworks ≫ Ap5050d Version -
   Extremenetworks ≫ Ap5050u Version -
   Extremenetworks ≫ Ap510c Version -
   Extremenetworks ≫ Ap510cx Version -
   Extremenetworks ≫ Ap630 Version -
   Extremenetworks ≫ Ap650 Version -
   Extremenetworks ≫ Ap650x Version -

Extremenetworks ≫ Iq Engine Version < 10.6r5

Extremenetworks ≫ Ap1130 Version -
Extremenetworks ≫ Ap550 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.09%	0.615

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

https://extremeportal.force.com/ExtrArticleDetail?an=000112741

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-35802

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-35802

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-35802

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2023-35802