PT-2017-13396 · Extreme · Exos

Publicado 2017-10-23 · Atualizado 2019-10-03 · CVE-2017-14331

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Extreme EXOS versions 16.x through 22.x

Description The issue allows administrators to bypass the "exsh restricted shell" protection mechanism, resulting in the ability to obtain an interactive shell.

Recommendations For versions 16.x through 22.x, consider restricting access to the shell until a patch is available. As a temporary workaround, limit the use of administrative privileges to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2017-14331

Produtos afetados

Exos

Referências · 3

• https://extremeportal.force.com/ExtrArticleDetail?n=000017719 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-14331 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-14331 · Nota de Segurança