Read the docs
TI-2017-10448 Aliases CVE-2017-14328GHSA-87p4-47xm-6c25

Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to trigger a buffer overflow leading to a reboot.

Priority LOW 36CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.

Summary

Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to trigger a buffer overflow leading to a reboot.

Why it matters now

EPSS 0.01326 71st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 76

CPEVersionsRoleVendor
cpe:2.3:o:extremenetworks:extremexos:15.7:*:*:*:*:*:*:*15.7VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.1:*:*:*:*:*:*:*16.1VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.1.2:-:*:*:*:*:*:*16.1.2VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.1.2:patch1-1:*:*:*:*:*:*16.1.2 patch1-1VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.1.2:patch1-4:*:*:*:*:*:*16.1.2 patch1-4VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.1.3:-:*:*:*:*:*:*16.1.3VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.1.3:patch1-11:*:*:*:*:*:*16.1.3 patch1-11VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.1.3:patch1-2:*:*:*:*:*:*16.1.3 patch1-2VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.1.3:patch1-4:*:*:*:*:*:*16.1.3 patch1-4VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.1.3:patch1-7:*:*:*:*:*:*16.1.3 patch1-7VulnerableExtreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:15.7:*:*:*:*:*:*:* Versions 15.7 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.1:*:*:*:*:*:*:* Versions 16.1 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.1.2:-:*:*:*:*:*:* Versions 16.1.2 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.1.2:patch1-1:*:*:*:*:*:* Versions 16.1.2 patch1-1 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.1.2:patch1-4:*:*:*:*:*:* Versions 16.1.2 patch1-4 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.1.3:-:*:*:*:*:*:* Versions 16.1.3 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.1.3:patch1-11:*:*:*:*:*:* Versions 16.1.3 patch1-11 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.1.3:patch1-2:*:*:*:*:*:* Versions 16.1.3 patch1-2 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.1.3:patch1-4:*:*:*:*:*:* Versions 16.1.3 patch1-4 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.1.3:patch1-7:*:*:*:*:*:* Versions 16.1.3 patch1-7 Vulnerable ·Extreme Networks
Show 66 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:extremenetworks:extremexos:16.1.3:patch1-8:*:*:*:*:*:*16.1.3 patch1-8VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.1.3:patch1-9:*:*:*:*:*:*16.1.3 patch1-9VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.1.4:-:*:*:*:*:*:*16.1.4VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.1.4:patch1-10:*:*:*:*:*:*16.1.4 patch1-10VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.1.4:patch1-3:*:*:*:*:*:*16.1.4 patch1-3VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.1.4:patch1-7:*:*:*:*:*:*16.1.4 patch1-7VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.1.4:patch1-9:*:*:*:*:*:*16.1.4 patch1-9VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.1.5:*:*:*:*:*:*:*16.1.5VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.2:*:*:*:*:*:*:*16.2VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.2.2:-:*:*:*:*:*:*16.2.2VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.2.2:patch1-3:*:*:*:*:*:*16.2.2 patch1-3VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.2.3:-:*:*:*:*:*:*16.2.3VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.2.3:patch1-12:*:*:*:*:*:*16.2.3 patch1-12VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.2.3:patch1-13:*:*:*:*:*:*16.2.3 patch1-13VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.2.3:patch1-14:*:*:*:*:*:*16.2.3 patch1-14VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.2.3:patch1-3:*:*:*:*:*:*16.2.3 patch1-3VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.2.3:patch1-6:*:*:*:*:*:*16.2.3 patch1-6VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.2.4:-:*:*:*:*:*:*16.2.4VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.2.4:patch1-3:*:*:*:*:*:*16.2.4 patch1-3VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.2.4:patch1-5:*:*:*:*:*:*16.2.4 patch1-5VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.2.4:patch1-6:*:*:*:*:*:*16.2.4 patch1-6VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.2.4:patch1-8:*:*:*:*:*:*16.2.4 patch1-8VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.2.5:-:*:*:*:*:*:*16.2.5VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.2.5:patch1-10:*:*:*:*:*:*16.2.5 patch1-10VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.2.5:patch1-11:*:*:*:*:*:*16.2.5 patch1-11VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.2.5:patch1-12:*:*:*:*:*:*16.2.5 patch1-12VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.2.5:patch1-13:*:*:*:*:*:*16.2.5 patch1-13VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.2.5:patch1-15:*:*:*:*:*:*16.2.5 patch1-15VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.2.5:patch1-3:*:*:*:*:*:*16.2.5 patch1-3VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.2.5:patch1-5:*:*:*:*:*:*16.2.5 patch1-5VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:16.2.5:patch1-7:*:*:*:*:*:*16.2.5 patch1-7VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:21.1:*:*:*:*:*:*:*21.1VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:21.1.1:patch1-2:*:*:*:*:*:*21.1.1 patch1-2VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:21.1.1:patch1-5:*:*:*:*:*:*21.1.1 patch1-5VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:21.1.2:-:*:*:*:*:*:*21.1.2VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:21.1.2:patch1-2:*:*:*:*:*:*21.1.2 patch1-2VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:21.1.3:-:*:*:*:*:*:*21.1.3VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:21.1.3:patch1-4:*:*:*:*:*:*21.1.3 patch1-4VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:21.1.3:patch1-7:*:*:*:*:*:*21.1.3 patch1-7VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:21.1.4:-:*:*:*:*:*:*21.1.4VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:21.1.4:patch1-3:*:*:*:*:*:*21.1.4 patch1-3VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:21.1.4:patch1-6:*:*:*:*:*:*21.1.4 patch1-6VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:21.1.4:patch1-7:*:*:*:*:*:*21.1.4 patch1-7VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:21.1.5:-:*:*:*:*:*:*21.1.5VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:21.1.5:patch1-2:*:*:*:*:*:*21.1.5 patch1-2VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:21.1.5:patch1-5:*:*:*:*:*:*21.1.5 patch1-5VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:21.1.5:patch1-7:*:*:*:*:*:*21.1.5 patch1-7VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:21.1.5:patch1-9:*:*:*:*:*:*21.1.5 patch1-9VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:22.1:*:*:*:*:*:*:*22.1VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:22.2:*:*:*:*:*:*:*22.2VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:22.2.1:patch1-4:*:*:*:*:*:*22.2.1 patch1-4VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:22.3:*:*:*:*:*:*:*22.3VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:22.3.1:patch1-4:*:*:*:*:*:*22.3.1 patch1-4VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:22.3.1:patch1-7:*:*:*:*:*:*22.3.1 patch1-7VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:22.3.1:patch1-8:*:*:*:*:*:*22.3.1 patch1-8VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:22.3.1:patch1cc-2:*:*:*:*:*:*22.3.1 patch1cc-2VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:22.4:*:*:*:*:*:*:*22.4VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:22.4.1:patch1-2:*:*:*:*:*:*22.4.1 patch1-2VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:22.4.1:patch1-3:*:*:*:*:*:*22.4.1 patch1-3VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:22.5:*:*:*:*:*:*:*22.5VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:22.5.1:patch1-2:*:*:*:*:*:*22.5.1 patch1-2VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:22.5.1:patch1-3:*:*:*:*:*:*22.5.1 patch1-3VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:22.5.1:patch1-7:*:*:*:*:*:*22.5.1 patch1-7VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:22.5.1:patch1-9:*:*:*:*:*:*22.5.1 patch1-9VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:22.6:*:*:*:*:*:*:*22.6VulnerableExtreme Networks
cpe:2.3:o:extremenetworks:extremexos:22.6.1:patch1-1:*:*:*:*:*:*22.6.1 patch1-1VulnerableExtreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.1.3:patch1-8:*:*:*:*:*:* Versions 16.1.3 patch1-8 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.1.3:patch1-9:*:*:*:*:*:* Versions 16.1.3 patch1-9 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.1.4:-:*:*:*:*:*:* Versions 16.1.4 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.1.4:patch1-10:*:*:*:*:*:* Versions 16.1.4 patch1-10 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.1.4:patch1-3:*:*:*:*:*:* Versions 16.1.4 patch1-3 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.1.4:patch1-7:*:*:*:*:*:* Versions 16.1.4 patch1-7 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.1.4:patch1-9:*:*:*:*:*:* Versions 16.1.4 patch1-9 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.1.5:*:*:*:*:*:*:* Versions 16.1.5 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.2:*:*:*:*:*:*:* Versions 16.2 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.2.2:-:*:*:*:*:*:* Versions 16.2.2 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.2.2:patch1-3:*:*:*:*:*:* Versions 16.2.2 patch1-3 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.2.3:-:*:*:*:*:*:* Versions 16.2.3 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.2.3:patch1-12:*:*:*:*:*:* Versions 16.2.3 patch1-12 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.2.3:patch1-13:*:*:*:*:*:* Versions 16.2.3 patch1-13 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.2.3:patch1-14:*:*:*:*:*:* Versions 16.2.3 patch1-14 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.2.3:patch1-3:*:*:*:*:*:* Versions 16.2.3 patch1-3 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.2.3:patch1-6:*:*:*:*:*:* Versions 16.2.3 patch1-6 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.2.4:-:*:*:*:*:*:* Versions 16.2.4 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.2.4:patch1-3:*:*:*:*:*:* Versions 16.2.4 patch1-3 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.2.4:patch1-5:*:*:*:*:*:* Versions 16.2.4 patch1-5 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.2.4:patch1-6:*:*:*:*:*:* Versions 16.2.4 patch1-6 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.2.4:patch1-8:*:*:*:*:*:* Versions 16.2.4 patch1-8 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.2.5:-:*:*:*:*:*:* Versions 16.2.5 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.2.5:patch1-10:*:*:*:*:*:* Versions 16.2.5 patch1-10 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.2.5:patch1-11:*:*:*:*:*:* Versions 16.2.5 patch1-11 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.2.5:patch1-12:*:*:*:*:*:* Versions 16.2.5 patch1-12 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.2.5:patch1-13:*:*:*:*:*:* Versions 16.2.5 patch1-13 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.2.5:patch1-15:*:*:*:*:*:* Versions 16.2.5 patch1-15 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.2.5:patch1-3:*:*:*:*:*:* Versions 16.2.5 patch1-3 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.2.5:patch1-5:*:*:*:*:*:* Versions 16.2.5 patch1-5 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:16.2.5:patch1-7:*:*:*:*:*:* Versions 16.2.5 patch1-7 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:21.1:*:*:*:*:*:*:* Versions 21.1 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:21.1.1:patch1-2:*:*:*:*:*:* Versions 21.1.1 patch1-2 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:21.1.1:patch1-5:*:*:*:*:*:* Versions 21.1.1 patch1-5 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:21.1.2:-:*:*:*:*:*:* Versions 21.1.2 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:21.1.2:patch1-2:*:*:*:*:*:* Versions 21.1.2 patch1-2 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:21.1.3:-:*:*:*:*:*:* Versions 21.1.3 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:21.1.3:patch1-4:*:*:*:*:*:* Versions 21.1.3 patch1-4 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:21.1.3:patch1-7:*:*:*:*:*:* Versions 21.1.3 patch1-7 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:21.1.4:-:*:*:*:*:*:* Versions 21.1.4 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:21.1.4:patch1-3:*:*:*:*:*:* Versions 21.1.4 patch1-3 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:21.1.4:patch1-6:*:*:*:*:*:* Versions 21.1.4 patch1-6 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:21.1.4:patch1-7:*:*:*:*:*:* Versions 21.1.4 patch1-7 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:21.1.5:-:*:*:*:*:*:* Versions 21.1.5 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:21.1.5:patch1-2:*:*:*:*:*:* Versions 21.1.5 patch1-2 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:21.1.5:patch1-5:*:*:*:*:*:* Versions 21.1.5 patch1-5 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:21.1.5:patch1-7:*:*:*:*:*:* Versions 21.1.5 patch1-7 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:21.1.5:patch1-9:*:*:*:*:*:* Versions 21.1.5 patch1-9 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:22.1:*:*:*:*:*:*:* Versions 22.1 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:22.2:*:*:*:*:*:*:* Versions 22.2 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:22.2.1:patch1-4:*:*:*:*:*:* Versions 22.2.1 patch1-4 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:22.3:*:*:*:*:*:*:* Versions 22.3 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:22.3.1:patch1-4:*:*:*:*:*:* Versions 22.3.1 patch1-4 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:22.3.1:patch1-7:*:*:*:*:*:* Versions 22.3.1 patch1-7 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:22.3.1:patch1-8:*:*:*:*:*:* Versions 22.3.1 patch1-8 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:22.3.1:patch1cc-2:*:*:*:*:*:* Versions 22.3.1 patch1cc-2 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:22.4:*:*:*:*:*:*:* Versions 22.4 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:22.4.1:patch1-2:*:*:*:*:*:* Versions 22.4.1 patch1-2 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:22.4.1:patch1-3:*:*:*:*:*:* Versions 22.4.1 patch1-3 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:22.5:*:*:*:*:*:*:* Versions 22.5 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:22.5.1:patch1-2:*:*:*:*:*:* Versions 22.5.1 patch1-2 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:22.5.1:patch1-3:*:*:*:*:*:* Versions 22.5.1 patch1-3 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:22.5.1:patch1-7:*:*:*:*:*:* Versions 22.5.1 patch1-7 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:22.5.1:patch1-9:*:*:*:*:*:* Versions 22.5.1 patch1-9 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:22.6:*:*:*:*:*:*:* Versions 22.6 Vulnerable ·Extreme Networks
  • cpe:2.3:o:extremenetworks:extremexos:22.6.1:patch1-1:*:*:*:*:*:* Versions 22.6.1 patch1-1 Vulnerable ·Extreme Networks

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-14328
  2. 2026-10-03 Alias added: GHSA-87p4-47xm-6c25

References

Advisory 1

  • TI-2020-13364 Extreme Networks EXOS before v.22.7 and before v.30.2 was discovered to contain an issue… CVSS 3.1HIGH 8.0
  • TI-2024-18270 In Extreme XOS through 22.6.1.4, a read-only user can escalate privileges to root via a… CVSS 3.1HIGH 8.6
  • TI-2017-10452 Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to hijack sessions by determining SessionID values. CVSS 3.0HIGH 8.1
  • TI-2017-10451 Extreme EXOS 16.x, 21.x, and 22.x allows administrators to bypass the "exsh restricted… CVSS 3.0MEDIUM 6.7
  • TI-2017-10450 Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via… CVSS 3.0MEDIUM 6.7
  • TI-2017-10449 Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via… CVSS 3.0MEDIUM 6.7
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences