PT-2018-17154
CVE-2018-5797
·
تاريخ النشر
2018-02-05
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Extreme Networks ExtremeWireless WiNG versions 5.x before 5.8.6.9
Extreme Networks ExtremeWireless WiNG versions 5.9.x before 5.9.1.3
Description:
An issue was discovered that involves an Smint encrypt hardcoded AES key. This key can be used by an attacker for packet decryption to obtain cleartext credentials, provided the attacker has access to a wired port.
Recommendations:
For Extreme Networks ExtremeWireless WiNG versions 5.x before 5.8.6.9, update to version 5.8.6.9 or later.
For Extreme Networks ExtremeWireless WiNG versions 5.9.x before 5.9.1.3, update to version 5.9.1.3 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾