Root Shell Vulnerability in Extreme Networks Switches
CVE-2017-14329

6.7MEDIUM

Key Information:

Vendor

Extremenetworks

Status
Extremexos
Vendor
CVE Published:
23 October 2017

What is CVE-2017-14329?

Extreme Networks EXOS versions 16.x, 21.x, and 22.x contain a vulnerability that allows administrators to gain unauthorized root shell access through specific debugging vectors involving the exsh debug shell. This flaw poses a significant risk to network integrity, potentially allowing for further exploitation and unauthorized control over network equipment.

References

https://extremeportal.force.com/ExtrArticleDetail?n=00001...
x_refsource_CONFIRM

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.