206 matches found
CVE-2020-16152
CVE-2020-16152 Resumen | ---|--- Fabricante del producto| Aerohive Networks / Extreme Networks Nombre del producto...
CVE-2023-35803
CVE-2023-35803 - Unauthenticated RCE in Extreme Networks/Aerohive Wireless Access Points PoC for ARM-based access points running HiveOS/IQ Engine "curl :8000/revshell|sh" Writeup here: https://research.aurainfosec.io/pentest/bee-yond-capacity/...
CVE-2023-46273
Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has an ahbgd buffer overflow via aheventsend...
CVE-2023-46273
Bonjour Gateway in Extreme Networks IQ Engine is affected by a buffer overflow in the ah_bgd function via ah_event_send. The vulnerability affects versions before 10.6r1a and 10.6r4 before 10.6r5 . The CVSS 3.1 score is 8.8 (HIGH) , with a network attack vector, low complexity, low privileges req...
EUVD-2023-60670
Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has an ahbgd buffer overflow via aheventsend...
Extreme Networks Extreme Platform ONE IAM Gateway 安全漏洞
The Extreme Networks Extreme Platform ONE IAM Gateway is a network identity and access management gateway provided by Extreme Networks, Inc. There is a security vulnerability present in the Extreme Networks Extreme Platform ONE IAM Gateway, which stems from a race condition in the API key...
CVE-2023-43119
An Access Control issue discovered in Extreme Networks Switch Engine EXOS before 32.5.1.5, also fixed in 22.7, 31.7.2 allows attackers to gain escalated privileges using crafted telnet commands via Redis server...
CVE-2023-43120
An issue discovered in Extreme Networks Switch Engine EXOS before 32.5.1.5, before 22.7 and before 31.7.1 allows attackers to gain escalated privileges via crafted HTTP request...
CVE-2023-43121
A Directory Traversal vulnerability discovered in Chalet application in Extreme Networks Switch Engine EXOS before 32.5.1.5, before 22.7, and before 31.7.2 allows attackers to read arbitrary files...
CVE-2013-7309
The OSPF implementation in Extreme Networks EXOS does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service routing disruption or obtain...
CVE-2020-36907 Extreme Networks Aerohive HiveOS <=11.x 11.x Unauthenticated Remote Denial of Service
Aerohive HiveOS contains a denial of service vulnerability in the NetConfig UI that allows unauthenticated attackers to render the web interface unusable. Attackers can send a crafted HTTP request to the action.php5 script with specific parameters to trigger a 5-minute service disruption...
EUVD-2025-32906
Malicious code in v0-core npm...
CVE-2025-11192
A vulnerability in Extreme Networks’ Fabric Engine VOSS before 9.3 was discovered. When SD-WAN AutoSense is enabled on a port, it may automatically configure fabric connectivity without validating ISIS authentication settings. The SD-WAN AutoSense implementation may be exploited by malicious acto...
CVE-2025-11192
A vulnerability in Extreme Networks’ Fabric Engine VOSS before 9.3 was discovered. When SD-WAN AutoSense is enabled on a port, it may automatically configure fabric connectivity without validating ISIS authentication settings. The SD-WAN AutoSense implementation may be exploited by malicious acto...
EUVD-2018-17560
Malware in sbrugna...
EUVD-2018-17562
Malware in sbrugna...
EUVD-2013-7086
Malware in sbrugna...
EUVD-2020-10232
Malware in sbrugna...