High WID-SEC-2023-2573 4 CVEs

Extreme Networks ExtremeXOS: Mehrere Schwachstellen

Published Oct 4, 2023 · Updated Oct 4, 2023 · de-DE

Vendor: Extreme Networks Product: ExtremeXOS Product: ExtremeXOS < 22.7.5.1 Product: ExtremeXOS < 31.3.100 Product: ExtremeXOS < 31.7.2.28 Product: ExtremeXOS < 32.5.1.5

Summary

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Extreme Networks ExtremeXOS ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder seine Privilegien zu erweitern.

Product

ExtremeXOS ist das Betriebssystem, das in Netzwerk-Switches von Extreme Networks verwendet wird.

Vulnerabilities 4

Unscored —

CVE-2023-43118

Cross Site Request Forgery (CSRF) vulnerability in Chalet application in Extreme Networks Switch Engine (EXOS) before 3…

Oct 16, 2023
Unscored —

CVE-2023-43119

An Access Control issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, also fixed in 22.7, 31.7.2…

Oct 16, 2023
Unscored —

CVE-2023-43120

An issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, before 22.7 and before 31.7.1 allows atta…

Oct 16, 2023
Unscored —

CVE-2023-43121

A Directory Traversal vulnerability discovered in Chalet application in Extreme Networks Switch Engine (EXOS) before 32…

Oct 16, 2023

Revision history

2023-10-04 #1
Initiale Fassung

References

Extreme Networks Security Advisories vom 2023-10-04
https://extreme-networks.my.site.com/ExtrArticleDetail?an=000114379
Extreme Networks Security Advisories vom 2023-10-04
https://extreme-networks.my.site.com/ExtrArticleDetail?an=000114378
Extreme Networks Security Advisories vom 2023-10-04
https://extreme-networks.my.site.com/ExtrArticleDetail?an=000114377
Extreme Networks Security Advisories vom 2023-10-04
https://extreme-networks.my.site.com/ExtrArticleDetail?an=000114376