PT-2023-28706 · Extreme Networks · Extreme Networks Switch Engine

David Yesland

·

Publicado

2023-10-16

·

Atualizado

2023-12-09

·

CVE-2023-43121

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Extreme Networks Switch Engine (EXOS) versions prior to 32.5.1.5 Extreme Networks Switch Engine (EXOS) versions prior to 22.7 Extreme Networks Switch Engine (EXOS) versions prior to 31.7.2
Description A Directory Traversal issue allows attackers to read arbitrary files.
Recommendations For versions prior to 32.5.1.5, update to version 32.5.1.5 or later. For versions prior to 22.7, update to version 22.7 or later. For versions prior to 31.7.2, update to version 31.7.2 or later.

Correção

Path traversal

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2023-43121

Produtos afetados

Extreme Networks Switch Engine