PT-2018-17150 · Extreme Networks · Extremewireless Wing

Publicado 2018-02-05 · Atualizado 2020-08-24 · CVE-2018-5793

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Extreme Networks ExtremeWireless WiNG versions 5.x before 5.8.6.9 Extreme Networks ExtremeWireless WiNG versions 5.9.x before 5.9.1.3

Description: An issue was discovered in Extreme Networks ExtremeWireless WiNG, where there is a remote, unauthenticated heap overflow in the HSD Process over the MINT (Media Independent Tunnel) Protocol on the WiNG Access Point via crafted packets.

Recommendations: For Extreme Networks ExtremeWireless WiNG versions 5.x before 5.8.6.9, update to version 5.8.6.9 or later. For Extreme Networks ExtremeWireless WiNG versions 5.9.x before 5.9.1.3, update to version 5.9.1.3 or later.

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2018-5793

Produtos afetados

Extremewireless Wing

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-5793 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-5793 · Aviso do Fabricante
• https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003 · Aviso do Fabricante