CVE-2023-35802

Katalog CVE

CVSS 9.8 · Critical EPSS 1,1%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada extremenetworks iq engine. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

IQ Engine before 10.6r1 on Extreme Network AP devices has a Buffer Overflow in the implementation of the CAPWAP protocol that may be exploited to obtain elevated privileges to conduct remote code execution. Access to the internal management interface/subnet is required to conduct the exploit.

Rincian

Terbit di NVD

15 Juli 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

1,1% peluang dieksploitasi; lebih tinggi dari 64,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://extremeportal.force.com/ExtrArticleDetail?an=000112741 advisory vendor