Bypass of Shell Protection in Extreme Networks EXOS Product
CVE-2017-14331

6.7MEDIUM

Key Information:

Vendor

Extremenetworks

Status
Extremexos
Vendor
CVE Published:
23 October 2017

What is CVE-2017-14331?

Certain versions of Extreme Networks EXOS allow administrators to bypass the 'exsh restricted shell' protection mechanism. This vulnerability can lead to unauthorized interaction with the system, potentially exposing sensitive configurations and data. Administrators are advised to apply the latest security updates and review their security policies to mitigate risks.

References

https://extremeportal.force.com/ExtrArticleDetail?n=00001...
x_refsource_CONFIRM

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.