Buffer Overflow Vulnerability in IQ Engine on Extreme Network AP Devices
CVE-2023-35803
9.8CRITICAL
Key Information:
- Vendor
Extremenetworks
- Status
- Vendor
- CVE Published:
- 4 October 2023
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2023-35803?
A buffer overflow vulnerability exists in the IQ Engine prior to version 10.6r2 on Extreme Network access point devices. This flaw could potentially allow an attacker to exploit the affected devices, leading to unauthorized access or a denial of service, thereby impacting the network's integrity and availability. It is crucial for organizations using these devices to update to the latest version to mitigate the associated risks.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.