Vulnerabilities > Extremenetworks > High

DATE CVE VULNERABILITY TITLE RISK
2023-10-16 CVE-2023-43118 Cross-Site Request Forgery (CSRF) vulnerability in Extremenetworks Exos 31.7.1/32.0
Cross Site Request Forgery (CSRF) vulnerability in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, fixed in 31.7.2 and 32.5.1.5 allows attackers to run arbitrary code and cause other unspecified impacts via /jsonrpc API.
network
low complexity
extremenetworks CWE-352
8.8
2023-10-16 CVE-2023-43121 Path Traversal vulnerability in Extremenetworks Exos 31.7.1/32.0
A Directory Traversal vulnerability discovered in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, before 22.7, and before 31.7.2 allows attackers to read arbitrary files.
network
low complexity
extremenetworks CWE-22
7.5
2023-10-16 CVE-2023-43120 Unspecified vulnerability in Extremenetworks Exos 31.0/31.7.0/32.0
An issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, before 22.7 and before 31.7.1 allows attackers to gain escalated privileges via crafted HTTP request.
network
low complexity
extremenetworks
8.8
2017-10-23 CVE-2017-14331 Unspecified vulnerability in Extremenetworks Extremexos
Extreme EXOS 16.x, 21.x, and 22.x allows administrators to bypass the "exsh restricted shell" protection mechanism and obtain an interactive shell.
local
low complexity
extremenetworks
7.2
2017-10-23 CVE-2017-14330 Improper Privilege Management vulnerability in Extremenetworks Extremexos
Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving a privileged process.
local
low complexity
extremenetworks CWE-269
7.2
2017-10-23 CVE-2017-14329 Improper Privilege Management vulnerability in Extremenetworks Extremexos
Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving an exsh debug shell.
local
low complexity
extremenetworks CWE-269
7.2
2017-10-23 CVE-2017-14328 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Extremenetworks Extremexos
Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to trigger a buffer overflow leading to a reboot.
network
low complexity
extremenetworks CWE-119
7.8