CVE-2020-16152

CVE-2020-16152 摘要 | ---|--- 产品厂商| Aerohive Networks / Extreme Networks 产品名称| HiveOS / IQ Engine 产品版本| 已在 10.0r8a build-242466 及更早版本上测试 Aerohive/Extreme Networks HiveOS 管理 Web 界面（ NetConfig ）存在本地文件包含（LFI）漏洞，因为它使用了易受字符串截断攻击的旧版 PHP。攻击者能够结合日志投毒，在易受攻击的接入点上获取 root 权限。 作为临时解决方案，可以使用以下命令禁用 Web 界面以防范此漏洞：n...

CVE-2023-46273

Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has an ahbgd buffer overflow via aheventsend...

CVE-2023-46273

Bonjour Gateway in Extreme Networks IQ Engine is affected by a buffer overflow in the ah_bgd function via ah_event_send. The vulnerability affects versions before 10.6r1a and 10.6r4 before 10.6r5 . The CVSS 3.1 score is 8.8 (HIGH) , with a network attack vector, low complexity, low privileges req...

EUVD-2023-60670

Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has an ahbgd buffer overflow via aheventsend...

EUVD-2023-39798

Malicious code in bioql PyPI...

EUVD-2023-50499

Malicious code in bioql PyPI...

EUVD-2023-50498

Malicious code in bioql PyPI...

CVE-2023-35802

IQ Engine before 10.6r1 on Extreme Network AP devices has a Buffer Overflow in the implementation of the CAPWAP protocol that may be exploited to obtain elevated privileges to conduct remote code execution. Access to the internal management interface/subnet is required to conduct the exploit...

CVE-2023-35803

IQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow...

CVE-2020-16152

The NetConfig UI administrative interface in Extreme Networks ExtremeWireless Aerohive HiveOS and IQ Engine through 10.0r8a allows attackers to execute PHP code as the root user via remote HTTP requests that insert this code into a log file and then traverse to that file...

CVE-2023-46271

Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has a buffer overflow. This issue arises from the ahwebui service, which listens on TCP port 3009 by default...

CVE-2023-46272

Buffer Overflow vulnerability in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, allows an attacker to execute arbitrary code via the implementation of the ahauth service...

CVE-2023-46271

Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has a buffer overflow. This issue arises from the ahwebui service, which listens on TCP port 3009 by default...

CVE-2023-46272

Buffer Overflow vulnerability in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, allows an attacker to execute arbitrary code via the implementation of the ahauth service...

CVE-2023-46272

Buffer Overflow vulnerability in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, allows an attacker to execute arbitrary code via the implementation of the ahauth service...

CVE-2023-46271

Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has a buffer overflow. This issue arises from the ahwebui service, which listens on TCP port 3009 by default...

CVE-2023-46272

Buffer Overflow vulnerability in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, allows an attacker to execute arbitrary code via the implementation of the ahauth service...

Extreme Networks IQ Engine 安全漏洞

Extreme Networks IQ Engine is an engine from Extreme Networks, Inc. in the United States. A security vulnerability exists in Extreme Networks IQ Engine versions prior to 10.6r1a and prior to 10.6r4 through 10.6r5, which stems from a buffer overflow in the ahauth service that allows execution of...

CVE-2023-46272

CVE-2023-46272 affects Extreme Networks IQ Engine prior to 10.6r1a and up to 10.6r4 before 10.6r5, via a stack-based buffer overflow in the ah_auth service that can lead to remote code execution. Exploitation is possible by sending crafted data to the ah_auth handler (UDP port 3001) and does not ...

CVE-2023-46271

Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has a buffer overflow. This issue arises from the ahwebui service, which listens on TCP port 3009 by default...