CVEvulnerability

CVE-2023-43119

9.8 CRITICAL Published 2023-10-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-10-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-284, CWE-863

Description

An Access Control issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, also fixed in 22.7, 31.7.2 allows attackers to gain escalated privileges using crafted telnet commands via Redis server.

Affected configurations

• extremenetworks exos (< 22.7) • extremenetworks exos (>= 31.7.0 < 31.7.2) • extremenetworks exos (>= 32.0 < 32.5.1.5)

Related

Weakness · CWE (2)

  • CWE-284 Improper Access Control weakness
  • CWE-863 Incorrect Authorization weakness

References