Cross Site Request Forgery Vulnerability in Extreme Networks Switch Engine
CVE-2023-43118

8.8HIGH

Key Information:

Vendor

Extremenetworks

Status
Exos
Vendor
CVE Published:
16 October 2023

What is CVE-2023-43118?

A Cross Site Request Forgery (CSRF) vulnerability exists in the Chalet application within Extreme Networks Switch Engine (EXOS) versions prior to 32.5.1.5. This weakness can potentially allow attackers to execute arbitrary code via the /jsonrpc API, leading to various unspecified impacts. Users running affected versions should apply the updates provided in 31.7.2 and 32.5.1.5 to mitigate risks associated with this security flaw.

References

https://extreme-networks.my.site.com/ExtrArticleDetail?an...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.