PT-2018-17150
CVE-2018-5793
·
Published
2018-02-05
·
Updated
2020-08-24
Description by
CVSS 3.1
5.9
MediumMetricsAV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
Extreme Networks ExtremeWireless WiNG versions 5.x before 5.8.6.9
Extreme Networks ExtremeWireless WiNG versions 5.9.x before 5.9.1.3
Description:
An issue was discovered in Extreme Networks ExtremeWireless WiNG, where there is a remote, unauthenticated heap overflow in the HSD Process over the MINT (Media Independent Tunnel) Protocol on the WiNG Access Point via crafted packets.
Recommendations:
For Extreme Networks ExtremeWireless WiNG versions 5.x before 5.8.6.9, update to version 5.8.6.9 or later.
For Extreme Networks ExtremeWireless WiNG versions 5.9.x before 5.9.1.3, update to version 5.9.1.3 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾