Design/Logic Flaw

An Access Control issue discovered in Extreme Networks Switch Engine EXOS before 32.5.1.5, also fixed in 22.7, 31.7.2 allows attackers to gain escalated privileges using crafted telnet commands via Redis server...

CVE-2023-43120

An issue discovered in Extreme Networks Switch Engine EXOS before 32.5.1.5, before 22.7 and before 31.7.1 allows attackers to gain escalated privileges via crafted HTTP request...

CVE-2023-43120

An issue discovered in Extreme Networks Switch Engine EXOS before 32.5.1.5, before 22.7 and before 31.7.1 allows attackers to gain escalated privileges via crafted HTTP request...

CVE-2023-43120

An issue discovered in Extreme Networks Switch Engine EXOS before 32.5.1.5, before 22.7 and before 31.7.1 allows attackers to gain escalated privileges via crafted HTTP request...

Cross site request forgery (csrf)

An issue discovered in Extreme Networks Switch Engine EXOS before 32.5.1.5, before 22.7 and before 31.7.1 allows attackers to gain escalated privileges via crafted HTTP request...

CVE-2023-43119

An Access Control issue discovered in Extreme Networks Switch Engine EXOS before 32.5.1.5, also fixed in 22.7, 31.7.2 allows attackers to gain escalated privileges using crafted telnet commands via Redis server...

Extreme Networks Switch Engine Security Vulnerability

Extreme Networks Switch Engine EXOS is a switch engine from Extreme Networks. A security vulnerability exists in Extreme Networks Switch Engine versions prior to 32.5.1.5, which stems from an Access Control Error vulnerability. An attacker could exploit the vulnerability to gain escalation...

CVE-2023-43118

Cross Site Request Forgery CSRF vulnerability in Chalet application in Extreme Networks Switch Engine EXOS before 32.5.1.5, fixed in 31.7.2 and 32.5.1.5 allows attackers to run arbitrary code and cause other unspecified impacts via /jsonrpc API...

PT-2023-6509 · Extreme Networks · Extreme Networks Switch Engine

Name of the Vulnerable Software and Affected Versions: Extreme Networks Switch Engine EXOS versions prior to 22.7 Extreme Networks Switch Engine EXOS versions prior to 31.7.2 Extreme Networks Switch Engine EXOS versions prior to 32.5.1.5 Description: The issue is related to an Access Control...

CVE-2023-43118

The CVE-2023-43118 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in the Chalet application of Extreme Networks Switch Engine (EXOS). Affected versions are EXOS prior to 32.5.1.5 (also listed as pre-32.5.1.5 in various sources). The underlying issue enables an attacker to execu...

CVE-2023-43121

CVE-2023-43121 concerns Extreme Networks Switch Engine (EXOS) Chalet application. A directory traversal flaw in Chalet (root cause: improper handling of file paths) enables reading arbitrary files. Affected EXOS versions are prior to 32.5.1.5, prior to 22.7, and prior to 31.7.2. Impact is read ac...

PT-2023-28706 · Extreme Networks · Extreme Networks Switch Engine

Name of the Vulnerable Software and Affected Versions: Extreme Networks Switch Engine EXOS versions prior to 32.5.1.5 Extreme Networks Switch Engine EXOS versions prior to 22.7 Extreme Networks Switch Engine EXOS versions prior to 31.7.2 Description: A Directory Traversal issue allows attackers t...

Extreme Networks Switch Engine Path Traversal Vulnerability

Extreme Networks Switch Engine EXOS is a switch engine from Extreme Networks. A security vulnerability exists in Extreme Networks Switch Engine that stems from a directory traversal vulnerability in the Chalet application. The vulnerability can be exploited to read arbitrary files. Affected...

PT-2023-28705 · Extreme Networks · Extreme Networks Switch Engine

Name of the Vulnerable Software and Affected Versions: Extreme Networks Switch Engine EXOS versions prior to 22.7 Extreme Networks Switch Engine EXOS versions prior to 31.7.1 Extreme Networks Switch Engine EXOS versions prior to 32.5.1.5 Description: An issue in Extreme Networks Switch Engine EXO...

CVE-2023-43118

Cross Site Request Forgery CSRF vulnerability in Chalet application in Extreme Networks Switch Engine EXOS before 32.5.1.5, fixed in 31.7.2 and 32.5.1.5 allows attackers to run arbitrary code and cause other unspecified impacts via /jsonrpc API...

Extreme Networks Switch Engine Cross-Site Request Forgery Vulnerability

Extreme Networks Switch Engine EXOS is a switch engine from Extreme Networks, Inc. A security vulnerability exists in Extreme Networks Switch Engine versions prior to 32.5.1.5, which stems from a cross-site request forgery CSRF vulnerability in the Chalet application. An attacker could exploit th...

CVE-2023-43120

An issue discovered in Extreme Networks Switch Engine EXOS before 32.5.1.5, before 22.7 and before 31.7.1 allows attackers to gain escalated privileges via crafted HTTP request...

CVE-2023-43119

An Access Control issue discovered in Extreme Networks Switch Engine EXOS before 32.5.1.5, also fixed in 22.7, 31.7.2 allows attackers to gain escalated privileges using crafted telnet commands via Redis server...

Extreme Networks Switch Engine Security Vulnerability

Extreme Networks Switch Engine EXOS is a switch engine from Extreme Networks. A security vulnerability exists in Extreme Networks Switch Engine that originates from a vulnerability that allows an attacker to gain escalation privileges via a specially crafted HTTP request. Affected products and...

CVE-2023-43121

A Directory Traversal vulnerability discovered in Chalet application in Extreme Networks Switch Engine EXOS before 32.5.1.5, before 22.7, and before 31.7.2 allows attackers to read arbitrary files...