CVE-2017-14327

Extreme EXOS 16.x, 21.x, and 22.x allows administrators to read arbitrary files...

CVE-2017-14332

Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to hijack sessions by determining SessionID values...

Design/Logic Flaw

Extreme EXOS 16.x, 21.x, and 22.x allows administrators to read arbitrary files...

CVE-2017-14331

Extreme EXOS 16.x, 21.x, and 22.x allows administrators to bypass the "exsh restricted shell" protection mechanism and obtain an interactive shell...

Design/Logic Flaw

Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving a privileged process...

CVE-2017-14327

Extreme EXOS 16.x, 21.x, and 22.x allows administrators to read arbitrary files...

CVE-2017-14329

Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving an exsh debug shell...

Design/Logic Flaw

Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving an exsh debug shell...

CVE-2017-14332

CVE-2017-14332 affects Extreme EXOS 15.7, 16.x, 21.x, and 22.x. The vulnerability enables remote attackers to hijack sessions by determining SessionID values. The connected sources confirm this is a session hijacking issue in Extreme EXOS; no exploits, vectors, or patch details are provided in th...

CVE-2017-14330

Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving a privileged process...

CVE-2017-14331

Summary (CVE-2017-14331): Extreme EXOS 16.x, 21.x and 22.x have a vulnerability where the “exsh restricted shell” protection can be bypassed, allowing an interactive shell. The affected software is Extreme EXOS; the root cause is bypassing the restricted-shell mechanism. The CVSS data (NVD) indic...

CVE-2017-14327

Extreme EXOS 16.x, 21.x, and 22.x allows administrators to read arbitrary files...

CVE-2017-14331

Extreme EXOS 16.x, 21.x, and 22.x allows administrators to bypass the "exsh restricted shell" protection mechanism and obtain an interactive shell...

CVE-2017-14332

Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to hijack sessions by determining SessionID values...

CVE-2017-14328

Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to trigger a buffer overflow leading to a reboot...

CVE-2017-14330

CVE-2017-14330 affects Extreme EXOS 16.x, 21.x and 22.x. A vulnerability allows administrators to obtain a root shell via vectors involving a privileged process. The NVD entries list local access (attack vector: LOCAL) with low attack complexity and high impact on confidentiality, integrity, and ...

CVE-2017-14328

CVE-2017-14328 affects Extreme EXOS (versions 15.7, 16.x, 21.x, 22.x). The vulnerability is a remote buffer overflow that can be triggered by an attacker, leading to a reboot of the device. Multiple connected sources corroborate the same description. The NVD entry lists a network-based, unauthent...

CVE-2017-14327

CVE-2017-14327 affects Extreme EXOS 16.x, 21.x, and 22.x, exposing an arbitrary file read vulnerability. The issue allows an administrator (privileges required: HIGH) with local access to read restricted files (confidentiality impact: HIGH; integrity/availability: none). The CVSS vector indicates...

CVE-2017-14329

Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving an exsh debug shell...

CVE-2017-14329

The CVE-2017-14329 entry affects Extreme EXOS 16.x, 21.x, and 22.x. Multiple connected documents confirm an elevation-of-privilege issue that can yield a root shell via vectors involving an exsh debug shell. Impact is described as gaining root-level access on affected EXOS versions; the vulnerabi...