Lucene search

K
cveMitreCVE-2023-43120
HistoryOct 16, 2023 - 7:15 p.m.

CVE-2023-43120

2023-10-1619:15:10
CWE-269
mitre
web.nvd.nist.gov
34
cve-2023-43120
extreme networks
exos
security vulnerability
escalated privileges
http request

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

25.7%

An issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, before 22.7 and before 31.7.1 allows attackers to gain escalated privileges via crafted HTTP request.

Affected configurations

Nvd
Node
extremenetworksexosRange<22.7
OR
extremenetworksexosRange31.031.7.1
OR
extremenetworksexosRange32.032.5.1.5
VendorProductVersionCPE
extremenetworksexos*cpe:2.3:o:extremenetworks:exos:*:*:*:*:*:*:*:*

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

25.7%

Related for CVE-2023-43120