Lucene search

K
cve[email protected]CVE-2017-14328
HistoryOct 23, 2017 - 8:29 a.m.

CVE-2017-14328

2017-10-2308:29:00
CWE-119
web.nvd.nist.gov
28
cve-2017-14328
extreme
exos
buffer overflow
remote attack
nvd

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.2%

Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to trigger a buffer overflow leading to a reboot.

Affected configurations

NVD
Node
extremenetworksextremexosMatch15.7
OR
extremenetworksextremexosMatch16.1
OR
extremenetworksextremexosMatch16.1.2-
OR
extremenetworksextremexosMatch16.1.2patch1-1
OR
extremenetworksextremexosMatch16.1.2patch1-4
OR
extremenetworksextremexosMatch16.1.3-
OR
extremenetworksextremexosMatch16.1.3patch1-11
OR
extremenetworksextremexosMatch16.1.3patch1-2
OR
extremenetworksextremexosMatch16.1.3patch1-4
OR
extremenetworksextremexosMatch16.1.3patch1-7
OR
extremenetworksextremexosMatch16.1.3patch1-8
OR
extremenetworksextremexosMatch16.1.3patch1-9
OR
extremenetworksextremexosMatch16.1.4-
OR
extremenetworksextremexosMatch16.1.4patch1-10
OR
extremenetworksextremexosMatch16.1.4patch1-3
OR
extremenetworksextremexosMatch16.1.4patch1-7
OR
extremenetworksextremexosMatch16.1.4patch1-9
OR
extremenetworksextremexosMatch16.1.5
OR
extremenetworksextremexosMatch16.2
OR
extremenetworksextremexosMatch16.2.2-
OR
extremenetworksextremexosMatch16.2.2patch1-3
OR
extremenetworksextremexosMatch16.2.3-
OR
extremenetworksextremexosMatch16.2.3patch1-12
OR
extremenetworksextremexosMatch16.2.3patch1-13
OR
extremenetworksextremexosMatch16.2.3patch1-14
OR
extremenetworksextremexosMatch16.2.3patch1-3
OR
extremenetworksextremexosMatch16.2.3patch1-6
OR
extremenetworksextremexosMatch16.2.4-
OR
extremenetworksextremexosMatch16.2.4patch1-3
OR
extremenetworksextremexosMatch16.2.4patch1-5
OR
extremenetworksextremexosMatch16.2.4patch1-6
OR
extremenetworksextremexosMatch16.2.4patch1-8
OR
extremenetworksextremexosMatch16.2.5-
OR
extremenetworksextremexosMatch16.2.5patch1-10
OR
extremenetworksextremexosMatch16.2.5patch1-11
OR
extremenetworksextremexosMatch16.2.5patch1-12
OR
extremenetworksextremexosMatch16.2.5patch1-13
OR
extremenetworksextremexosMatch16.2.5patch1-15
OR
extremenetworksextremexosMatch16.2.5patch1-3
OR
extremenetworksextremexosMatch16.2.5patch1-5
OR
extremenetworksextremexosMatch16.2.5patch1-7
OR
extremenetworksextremexosMatch21.1
OR
extremenetworksextremexosMatch21.1.1patch1-2
OR
extremenetworksextremexosMatch21.1.1patch1-5
OR
extremenetworksextremexosMatch21.1.2-
OR
extremenetworksextremexosMatch21.1.2patch1-2
OR
extremenetworksextremexosMatch21.1.3-
OR
extremenetworksextremexosMatch21.1.3patch1-4
OR
extremenetworksextremexosMatch21.1.3patch1-7
OR
extremenetworksextremexosMatch21.1.4-
OR
extremenetworksextremexosMatch21.1.4patch1-3
OR
extremenetworksextremexosMatch21.1.4patch1-6
OR
extremenetworksextremexosMatch21.1.4patch1-7
OR
extremenetworksextremexosMatch21.1.5-
OR
extremenetworksextremexosMatch21.1.5patch1-2
OR
extremenetworksextremexosMatch21.1.5patch1-5
OR
extremenetworksextremexosMatch21.1.5patch1-7
OR
extremenetworksextremexosMatch21.1.5patch1-9
OR
extremenetworksextremexosMatch22.1
OR
extremenetworksextremexosMatch22.2
OR
extremenetworksextremexosMatch22.2.1patch1-4
OR
extremenetworksextremexosMatch22.3
OR
extremenetworksextremexosMatch22.3.1patch1-4
OR
extremenetworksextremexosMatch22.3.1patch1-7
OR
extremenetworksextremexosMatch22.3.1patch1-8
OR
extremenetworksextremexosMatch22.3.1patch1cc-2
OR
extremenetworksextremexosMatch22.4
OR
extremenetworksextremexosMatch22.4.1patch1-2
OR
extremenetworksextremexosMatch22.4.1patch1-3
OR
extremenetworksextremexosMatch22.5
OR
extremenetworksextremexosMatch22.5.1patch1-2
OR
extremenetworksextremexosMatch22.5.1patch1-3
OR
extremenetworksextremexosMatch22.5.1patch1-7
OR
extremenetworksextremexosMatch22.5.1patch1-9
OR
extremenetworksextremexosMatch22.6
OR
extremenetworksextremexosMatch22.6.1patch1-1

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.2%

Related for CVE-2017-14328