PT-2018-17151
CVE-2018-5794
·
Publicado
2018-02-05
·
Atualizado
2018-02-22
Descrição por
CVSS 3.1
5.3
MédiaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
Extreme Networks ExtremeWireless WiNG versions 5.x before 5.8.6.9
Extreme Networks ExtremeWireless WiNG versions 5.9.x before 5.9.1.3
Description:
An issue was discovered where there is no authentication required for the AeroScout Service. This can be exploited via a crafted UDP packet.
Recommendations:
For Extreme Networks ExtremeWireless WiNG versions 5.x before 5.8.6.9, update to version 5.8.6.9 or later.
For Extreme Networks ExtremeWireless WiNG versions 5.9.x before 5.9.1.3, update to version 5.9.1.3 or later.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾