CVE-2023-43120 - Vulnerability Details - OpenCVE

ReportizFlow

An issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, before 22.7 and before 31.7.1 allows attackers to gain escalated privileges via crafted HTTP request.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Extremenetworks	Exos

Configuration 1 [-]

OR	cpe:2.3:o:extremenetworks:exos::::::::
	cpe:2.3:o:extremenetworks:exos::::::::
	cpe:2.3:o:extremenetworks:exos::::::::

No data.

References

Link	Providers
https://extreme-networks.my.site.com/ExtrArticleDetail?an=000114377

History

Wed, 18 Sep 2024 08:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Tue, 17 Sep 2024 18:00:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-269

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-10-16T00:00:00

Updated: 2024-09-17T16:16:48.178Z

Reserved: 2023-09-18T00:00:00

Link: CVE-2023-43120

Vulnrichment

Updated: 2024-08-02T19:37:22.976Z

NVD

Status : Modified

Published: 2023-10-16T19:15:10.680

Modified: 2024-11-21T08:23:43.757

Link: CVE-2023-43120

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:extremenetworks:exos:*:*:*:*:*:*:*:*", "matchCriteriaId": "D24D6059-8005-487C-824A-DA558414E521", "versionEndExcluding": "22.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:extremenetworks:exos:*:*:*:*:*:*:*:*", "matchCriteriaId": "0E062874-4540-4C3C-B98D-B078E67EFDF7", "versionEndExcluding": "31.7.1", "versionStartIncluding": "31.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:extremenetworks:exos:*:*:*:*:*:*:*:*", "matchCriteriaId": "DF47D6A6-2028-4547-A05E-EE9576AC557B", "versionEndExcluding": "32.5.1.5", "versionStartIncluding": "32.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "An issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, before 22.7 and before 31.7.1 allows attackers to gain escalated privileges via crafted HTTP request."}, {"lang": "es", "value": "Un problema descubierto en Extreme Networks Switch Engine (EXOS) anterior a 32.5.1.5, anterior a 22.7 y anterior a 31.7.1 permite a los atacantes obtener privilegios escalados a trav\u00e9s de una solicitud HTTP manipulada."}], "id": "CVE-2023-43120", "lastModified": "2024-11-21T08:23:43.757", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "[email protected]", "type": "Primary"}]}, "published": "2023-10-16T19:15:10.680", "references": [{"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "https://extreme-networks.my.site.com/ExtrArticleDetail?an=000114377"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://extreme-networks.my.site.com/ExtrArticleDetail?an=000114377"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "[email protected]", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-269"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}