CVE-2018-5789

CVE-2018-5789 affects Extreme Networks ExtremeWireless WiNG 5.x (pre-5.8.6.9 and pre-5.9.1.3). The issue is a remote, unauthenticated XML Entity Expansion Denial of Service via crafted XML entities to the Web UI on WiNG AP/Controller. Impact is partial availability loss. Root cause is XML Externa...

CVE-2018-5793

CVE-2018-5793 affects Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. A remote, unauthenticated heap overflow occurs in the HSD process over the MINT protocol on WiNG APs, triggered by crafted packets, leading to possible denial of service via a crash. No exploi...

CVE-2018-5796

An elevation of privileges vulnerability in Extreme Networks ExtremeWireless WiNG (5.x) before 5.8.6.9 and 5.9.x before 5.9.1.3 allows an attacker to obtain a hidden root shell by entering the administrator password in conjunction with the 'service start-shell' CLI command. Affected product: Extr...

CVE-2018-5795

CVE-2018-5795 affects Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. The issue is Arbitrary File Write from the WebGUI on the WiNG Access Point/Controller. Descriptions in connected sources confirm the vulnerability exists in the Web User Interface of the WiNG ...

CVE-2018-5790

An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is Remote, Unauthenticated "Global" Denial of Service in the RIM Radio Interface Module over the MINT Media Independent Tunnel Protocol on the WiNG Access Point via crafted packets...

CVE-2018-5797

An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is an Smintencrypt Hardcoded AES Key that can be used for packet decryption obtaining cleartext credentials by an attacker who has access to a wired port...

CVE-2018-5792

CVE-2018-5792 affects Extreme Networks ExtremeWireless WiNG 5.x (pre-5.8.6.9 and pre-5.9.1.3) where a remote, unauthenticated heap overflow occurs in the HSD process over the MINT (Media Independent Tunnel) protocol on the WiNG APs, exploitable via crafted packets. The issue can cause a denial of...

Extreme Networks ExtremeWireless WiNG Denial of Service Vulnerability (CNVD-2018-03323)

Extreme Networks ExtremeWireless WiNG is a wireless access solution from Extreme Networks.WiNG Access Point AP is one of the wireless access points.Controller is the wireless controller.Web User Interface is one of the web management interfaces. The WiNG Access Point AP is a wireless access point...

Extreme Networks ExtremeWireless WiNG Denial of Service Vulnerability

Extreme Networks ExtremeWireless WiNG is a wireless access solution from Extreme Networks, Inc.The WiNG Access Point AP is one of the... A security vulnerability exists in the MINT Media Independent Tunnel Protocol for WiNG APs in Extreme Networks ExtremeWireless WiNG version 5.x prior to 5.8.6.9...

Extreme Networks ExtremeWireless WiNG Arbitrary File Write Vulnerability

Extreme Networks ExtremeWireless WiNG is a wireless access solution from Extreme Networks.WiNG Access Point AP is one of the wireless access points.Controller is the wireless controller.Web User Interface is one of the web management interfaces. The WiNG Access Point AP is a wireless access point...

Extreme Networks ExtremeWireless WiNG Heap Overflow Vulnerability

Extreme Networks ExtremeWireless WiNG is a wireless access solution from Extreme Networks, Inc.The WiNG Access Point AP is one of the... A heap overflow vulnerability exists in the MINT Media Independent Tunnel Protocol for WiNG APs in Extreme Networks ExtremeWireless WiNG version 5.x prior to...

Extreme Networks ExtremeWireless WiNG Authentication Bypass Vulnerability

Extreme Networks ExtremeWireless WiNG is a wireless access solution from Extreme Networks. A security vulnerability exists in Extreme Networks ExtremeWireless WiNG version 5.x prior to 5.8.6.9 and version 5.9.x prior to 5.9.1.3, which stems from a program that fails to perform authentication...

Extreme EXOS Security Bypass Vulnerability

Extreme EXOS is a new generation modular switch operating system from Extreme Networks. A security bypass vulnerability exists in Extreme EXOS versions 16.x, 21.x, and 22.x. The vulnerability can be exploited to bypass the 'exsh restricted shell' protection mechanism and gain access to the...

Extreme ExtremeXOS OpenSSH Vulnerabilities (VN-2016-001)

Extreme ExtremeXOS is prone to multiple OpenSSH vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Extreme ExtremeXOS (EXOS) Detection (SNMP)

SNMP based detection of Extreme ExtremeXOS EXOS. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-7309

The OSPF implementation in Extreme Networks EXOS does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service routing disruption or obtain...

CVE-2013-7309

Technical details for CVE-2013-7309 are not provided in the connected documents; only related CVEs (e.g., CVE-2013-0149) and vendor bulletins appear. Monitor for updates.

CVE-2013-7309

The OSPF implementation in Extreme Networks EXOS does not consider the possibility of duplicate Link State ID values in Link State Advertisement LSA packets before performing operations on the LSA database, which allows remote attackers to cause a denial of service routing disruption or obtain...

NSD vulnerable to one-byte overflow

Overview A vulnerability exists in the way NSD processes certain types of packets that may lead to a one-byte buffer overflow. Description Name server daemon NSD is an open source name server developed by NLnet Labs. NSD contains an off-by-one error that can cause a one-byte buffer overflow when...

SNMPv3 improper HMAC validation allows authentication bypass

Overview A vulnerability in the way implementations of SNMPv3 handle specially crafted packets may allow authentication bypass. Description SNMP can be configured to utilize version 3, which is the current standard version of SNMP. SNMPv3 incorporates security features such as authentication and...