CVEvulnerability

CVE-2018-5797

7.5 HIGH Published 2018-02-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-02-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
3.3 LOW — AV:A/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-798

Description

An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is an Smint_encrypt Hardcoded AES Key that can be used for packet decryption (obtaining cleartext credentials) by an attacker who has access to a wired port.

Affected configurations

• extremenetworks extremewireless wing (>= 5.0 < 5.8.6.9) • extremenetworks extremewireless wing (>= 5.9.0 < 5.9.1.3)

Related

Weakness · CWE (1)

  • CWE-798 Use of Hard-coded Credentials weakness

References