CVE-2018-5790

An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is Remote, Unauthenticated "Global" Denial of Service in the RIM Radio Interface Module over the MINT Media Independent Tunnel Protocol on the WiNG Access Point via crafted packets...

CVE-2018-5789

CVE-2018-5789 affects Extreme Networks ExtremeWireless WiNG 5.x (pre-5.8.6.9 and pre-5.9.1.3). The issue is a remote, unauthenticated XML Entity Expansion Denial of Service via crafted XML entities to the Web UI on WiNG AP/Controller. Impact is partial availability loss. Root cause is XML Externa...

CVE-2018-5791

Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3 contain a remote, unauthenticated heap overflow in the HSD process over the MINT protocol on WiNG APs. An attacker can craft packets to trigger the overflow via the MINT channel, potentially causing a denial of serv...

CVE-2018-5788

CVE-2018-5788 affects Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. The RIM (Radio Interface Module) run on the WiNG AP is vulnerable to a remote, unauthenticated denial-of-service via specially crafted packets. Impact is a denial of service to the AP’s RIM co...

CVE-2018-5792

CVE-2018-5792 affects Extreme Networks ExtremeWireless WiNG 5.x (pre-5.8.6.9 and pre-5.9.1.3) where a remote, unauthenticated heap overflow occurs in the HSD process over the MINT (Media Independent Tunnel) protocol on the WiNG APs, exploitable via crafted packets. The issue can cause a denial of...

CVE-2018-5795

CVE-2018-5795 affects Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. The issue is Arbitrary File Write from the WebGUI on the WiNG Access Point/Controller. Descriptions in connected sources confirm the vulnerability exists in the Web User Interface of the WiNG ...

CVE-2018-5796

An elevation of privileges vulnerability in Extreme Networks ExtremeWireless WiNG (5.x) before 5.8.6.9 and 5.9.x before 5.9.1.3 allows an attacker to obtain a hidden root shell by entering the administrator password in conjunction with the 'service start-shell' CLI command. Affected product: Extr...

CVE-2018-5791

An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is a Remote, Unauthenticated Heap Overflow in the HSD Process over the MINT Media Independent Tunnel Protocol on the WiNG Access Point via crafted packets...

CVE-2018-5794

CVE-2018-5794 affects Extreme Networks ExtremeWireless WiNG 5.x (before 5.8.6.9) and 5.9.x (before 5.9.1.3). The issue is a lack of authentication for the AeroScout service over forged UDP packets, enabling access without credentials. The provided documents consistently describe an authentication...

CVE-2018-5787

Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3 have a remote, unauthenticated stack overflow in the RIM (Radio Interface Module) on the WiNG Access Point triggered by crafted packets, leading to potential denial of service. CVSS3 indicates HIGH impact on availab...

CVE-2018-5793

CVE-2018-5793 affects Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. A remote, unauthenticated heap overflow occurs in the HSD process over the MINT protocol on WiNG APs, triggered by crafted packets, leading to possible denial of service via a crash. No exploi...

CVE-2018-5797

The CVE-2018-5797 entry concerns Extreme Networks ExtremeWireless WiNG (versions 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3). The root cause is a hardcoded Smint_encrypt AES key which can be used to decrypt packets and obtain cleartext credentials. This affects devices where an attacker has acce...

CVE-2018-5789

An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is a Remote, Unauthenticated XML Entity Expansion Denial of Service on the WiNG Access Point / Controller via crafted XML entities to the Web User Interface...

CVE-2018-5796

An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is a Hidden Root Shell by entering the administrator password in conjunction with the 'service start-shell' CLI command...

CVE-2018-5790

The CVE-2018-5790 issue affects Extreme Networks ExtremeWireless WiNG 5.x, specifically before 5.8.6.9 and before 5.9.1.3 for the 5.9.x line. The vulnerability is a Remote, Unauthenticated Denial of Service targeting the Radio Interface Module (RIM) over the MINT protocol on WiNG Access Points, t...

Extreme Networks ExtremeWireless WiNG Denial of Service Vulnerability (CNVD-2018-03324)

Extreme Networks ExtremeWireless WiNG is a wireless access solution from Extreme Networks, Inc. The WiNG Access Point AP is one of the wireless access point devices. A security vulnerability exists in the RIM Radio Interface Module process of the WiNG AP in Extreme Networks ExtremeWireless WiNG...

Extreme Networks ExtremeWireless WiNG stack overflow vulnerability (CNVD-2018-03317)

Extreme Networks ExtremeWireless WiNG is a wireless access solution from Extreme Networks, Inc. The WiNG Access Point AP is one of the wireless access point devices. A stack overflow vulnerability exists in the RIM Radio Interface Module process of the WiNG AP in Extreme Networks ExtremeWireless...

Extreme Networks ExtremeWireless WiNG Elevation of Privilege Vulnerability

Extreme Networks ExtremeWireless WiNG is a wireless access solution from Extreme Networks. A security vulnerability exists in the generation of root shell access passwords in Extreme Networks ExtremeWireless WiNG version 5.x prior to 5.8.6.9 and version 5.9.x prior to 5.9.1.3. An attacker can...

Extreme Networks ExtremeWireless WiNG Hardcoded AES Key Vulnerability

Extreme Networks ExtremeWireless WiNG is a wireless access solution from Extreme Networks. secure MINT static message key is one of the static MIMT message keys. A security vulnerability exists in the Secure MINT static message key in Extreme Networks ExtremeWireless WiNG version 5.x prior to...

Extreme Networks ExtremeWireless WiNG Authentication Bypass Vulnerability

Extreme Networks ExtremeWireless WiNG is a wireless access solution from Extreme Networks. A security vulnerability exists in Extreme Networks ExtremeWireless WiNG version 5.x prior to 5.8.6.9 and version 5.9.x prior to 5.9.1.3, which stems from a program that fails to perform authentication...