PT-2023-4077 · Extreme Networks · Iq Engine

Lachlan Davidson · Publicado 2023-03-13 · Atualizado 2023-10-10 · CVE-2023-35803

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IQ Engine versions prior to 10.6r2

Description The issue is related to a buffer overflow in the IQ Engine service of Extreme Network AP devices, which can be exploited by a remote attacker to elevate privileges and execute arbitrary code.

Recommendations For IQ Engine versions prior to 10.6r2, update to version 10.6r2 or later to resolve the issue.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

CWE-120

Identificadores relacionados

BDU:2023-04377

CVE-2023-35803

ZDI-23-1017

Produtos afetados

Iq Engine

Referências · 16

• 🔥 https://github.com/lachlan2k/CVE-2023-35803 · Exploit
• https://community.extremenetworks.com/t5/extremewireless-iqe/cve-2023-35803-mitigation/td-p/96488 · Nota
• https://research.aurainfosec.io/pentest/bee-yond-capacity · Nota
• https://zerodayinitiative.com/advisories/ZDI-23-1017 · Nota de Segurança
• https://bdu.fstec.ru/vul/2023-04377 · Nota de Segurança
• https://t.me/rnetsec/18945 · Publicação no Telegram
• https://t.me/cvenotify/59016 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-35803 · Nota de Segurança
• https://twitter.com/techadversary/status/1691241928468443136 · Publicação no Twitter
• https://t.me/cvenotify/59217 · Publicação no Telegram
• https://t.me/cibsecurity/71651 · Publicação no Telegram
• https://t.me/defcon_news/115768 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-35803 · Aviso do Fabricante
• https://extremeportal.force.com/ExtrArticleDetail?an=000112742 · Nota
• https://community.extremenetworks.com/t5/security-advisories-formerly/sa-2023-067-iq-engine-acsd-service-buffer-overflow-cve-2023/ba-p/96472 · Aviso do Fabricante