PT-2018-17151 · Extreme Networks · Extremewireless Wing

Publicado 2018-02-05 · Atualizado 2018-02-22 · CVE-2018-5794

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Extreme Networks ExtremeWireless WiNG versions 5.x before 5.8.6.9 Extreme Networks ExtremeWireless WiNG versions 5.9.x before 5.9.1.3

Description: An issue was discovered where there is no authentication required for the AeroScout Service. This can be exploited via a crafted UDP packet.

Recommendations: For Extreme Networks ExtremeWireless WiNG versions 5.x before 5.8.6.9, update to version 5.8.6.9 or later. For Extreme Networks ExtremeWireless WiNG versions 5.9.x before 5.9.1.3, update to version 5.9.1.3 or later.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2018-5794

Produtos afetados

Extremewireless Wing

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-5794 · Nota de Segurança
• https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-5794 · Aviso do Fabricante