Read the docs

Extreme Networks

Records35All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high16CVSS 7.0–8.9

Exploited now

Extreme Networks records in CISA KEV

No Extreme Networks vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

5 records in Exos · all components

Priority MEDIUM 50

An Access Control issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, also fixed in 22.7, 31.7.2 allows attackers to gain escalated privileges using crafted telnet commands via Redis server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00754 Published 2023-10-16 No fix listed CWE-284
Priority MEDIUM 40

Cross Site Request Forgery (CSRF) vulnerability in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, fixed in 31.7.2 and 32.5.1.5 allows attackers to run arbitrary code and cause other unspecif…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00331 Published 2023-10-16 No fix listed CWE-352
Priority LOW 27

The OSPF implementation in Extreme Networks EXOS does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing operations on the LSA database, which allow…

CVSS 2.0MEDIUM 5.4 Adjacent network No auth Interaction — EPSS 0.01229 Published 2014-01-23 No fix listed
Open these records in search →