CVE-2023-46272

CVSS 8.8 HIGHEPSS 0.4%CWE-121

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 8.8EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

19 feb 2025Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Buffer Overflow vulnerability in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, allows an attacker to execute arbitrary code via the implementation of the ah_auth service

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Productos afectados

n/a · n/a

Referencias

https://extreme-networks.my.site.com/ExtrArticleDetail?an=000115355&q=CVE-2023-46272 https://www.zerodayinitiative.com/advisories/ZDI-23-1765/