Lucene search

K
nvd[email protected]NVD:CVE-2017-14331
HistoryOct 23, 2017 - 8:29 a.m.

CVE-2017-14331

2017-10-2308:29:00
web.nvd.nist.gov
3

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

6.6

Confidence

High

EPSS

0

Percentile

12.6%

Extreme EXOS 16.x, 21.x, and 22.x allows administrators to bypass the “exsh restricted shell” protection mechanism and obtain an interactive shell.

Affected configurations

Nvd
Node
extremenetworksextremexosMatch15.7
OR
extremenetworksextremexosMatch16.1.2
OR
extremenetworksextremexosMatch16.1.3
OR
extremenetworksextremexosMatch16.1.4
OR
extremenetworksextremexosMatch16.2
OR
extremenetworksextremexosMatch16.2.2
OR
extremenetworksextremexosMatch16.2.3
OR
extremenetworksextremexosMatch16.2.4
OR
extremenetworksextremexosMatch21.1
OR
extremenetworksextremexosMatch21.1.1
OR
extremenetworksextremexosMatch21.1.2
OR
extremenetworksextremexosMatch21.1.3
OR
extremenetworksextremexosMatch21.1.4
OR
extremenetworksextremexosMatch22.1
OR
extremenetworksextremexosMatch22.2
OR
extremenetworksextremexosMatch22.3
OR
extremenetworksextremexosMatch22.4
VendorProductVersionCPE
extremenetworksextremexos15.7cpe:2.3:o:extremenetworks:extremexos:15.7:*:*:*:*:*:*:*
extremenetworksextremexos16.1.2cpe:2.3:o:extremenetworks:extremexos:16.1.2:*:*:*:*:*:*:*
extremenetworksextremexos16.1.3cpe:2.3:o:extremenetworks:extremexos:16.1.3:*:*:*:*:*:*:*
extremenetworksextremexos16.1.4cpe:2.3:o:extremenetworks:extremexos:16.1.4:*:*:*:*:*:*:*
extremenetworksextremexos16.2cpe:2.3:o:extremenetworks:extremexos:16.2:*:*:*:*:*:*:*
extremenetworksextremexos16.2.2cpe:2.3:o:extremenetworks:extremexos:16.2.2:*:*:*:*:*:*:*
extremenetworksextremexos16.2.3cpe:2.3:o:extremenetworks:extremexos:16.2.3:*:*:*:*:*:*:*
extremenetworksextremexos16.2.4cpe:2.3:o:extremenetworks:extremexos:16.2.4:*:*:*:*:*:*:*
extremenetworksextremexos21.1cpe:2.3:o:extremenetworks:extremexos:21.1:*:*:*:*:*:*:*
extremenetworksextremexos21.1.1cpe:2.3:o:extremenetworks:extremexos:21.1.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 171

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

6.6

Confidence

High

EPSS

0

Percentile

12.6%

Related for NVD:CVE-2017-14331