Lucene search

[email protected]CVE-2017-14331

HistoryOct 23, 2017 - 8:29 a.m.

CVE-2017-14331

2017-10-2308:29:00

[email protected]

web.nvd.nist.gov

extreme exos

vulnerability

bypass

shell

interactive shell

cve-2017-14331

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Extreme EXOS 16.x, 21.x, and 22.x allows administrators to bypass the “exsh restricted shell” protection mechanism and obtain an interactive shell.

Affected configurations

NVD

Node

extremenetworksextremexosMatch15.7

extremenetworksextremexosMatch16.1.2

extremenetworksextremexosMatch16.1.3

extremenetworksextremexosMatch16.1.4

extremenetworksextremexosMatch16.2

extremenetworksextremexosMatch16.2.2

extremenetworksextremexosMatch16.2.3

extremenetworksextremexosMatch16.2.4

extremenetworksextremexosMatch21.1

extremenetworksextremexosMatch21.1.1

extremenetworksextremexosMatch21.1.2

extremenetworksextremexosMatch21.1.3

extremenetworksextremexosMatch21.1.4

extremenetworksextremexosMatch22.1

extremenetworksextremexosMatch22.2

extremenetworksextremexosMatch22.3

extremenetworksextremexosMatch22.4

CPENameOperatorVersion
extremenetworks:extremexosextremenetworks extremexoseq15.7
extremenetworks:extremexosextremenetworks extremexoseq16.1.2
extremenetworks:extremexosextremenetworks extremexoseq16.1.3
extremenetworks:extremexosextremenetworks extremexoseq16.1.4
extremenetworks:extremexosextremenetworks extremexoseq16.2
extremenetworks:extremexosextremenetworks extremexoseq16.2.2
extremenetworks:extremexosextremenetworks extremexoseq16.2.3
extremenetworks:extremexosextremenetworks extremexoseq16.2.4
extremenetworks:extremexosextremenetworks extremexoseq21.1
extremenetworks:extremexosextremenetworks extremexoseq21.1.1

CPE	Name	Operator	Version
extremenetworks:extremexos	extremenetworks extremexos	eq	15.7
extremenetworks:extremexos	extremenetworks extremexos	eq	16.1.2
extremenetworks:extremexos	extremenetworks extremexos	eq	16.1.3
extremenetworks:extremexos	extremenetworks extremexos	eq	16.1.4
extremenetworks:extremexos	extremenetworks extremexos	eq	16.2
extremenetworks:extremexos	extremenetworks extremexos	eq	16.2.2
extremenetworks:extremexos	extremenetworks extremexos	eq	16.2.3
extremenetworks:extremexos	extremenetworks extremexos	eq	16.2.4
extremenetworks:extremexos	extremenetworks extremexos	eq	21.1
extremenetworks:extremexos	extremenetworks extremexos	eq	21.1.1

Rows per page:

1-10 of 171

References

extremeportal.force.com/ExtrArticleDetail?n=000017719

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVE-2017-14331

cvelist1 prion1 nvd1