Login Request a demo
EX
Product
Exos
by Extremenetworks · last CVE Oct 16, 2023
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 1High 3Medium 0Low 0
Severity
All severities5Critical1High3Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Exos to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-43119
9.8
1%
Oct 16
An Access Control issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, also fixed in 22.7, 31.7.2 allows attackers to gain escalated privileges using crafted…
Affected: before 22.7; 31.7.0 before 31.7.2; 32.0 before 32.5.1.5
CVE-2023-43118
8.8
0%
Oct 16
Cross Site Request Forgery (CSRF) vulnerability in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, fixed in 31.7.2 and 32.5.1.5 allows attackers to…
Affected: 31.7.0 before 31.7.2; 32.0 before 32.5.1.5
CVE-2023-43120
8.8
1%
Oct 16
An issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, before 22.7 and before 31.7.1 allows attackers to gain escalated privileges via crafted HTTP request
Affected: before 22.7; 31.0 before 31.7.1; 32.0 before 32.5.1.5
CVE-2023-43121
7.5
1%
Oct 16
A Directory Traversal vulnerability discovered in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, before 22.7, and before 31.7.2 allows attackers to…
Affected: before 22.7; 31.7.0 before 31.7.2; 32.0 before 32.5.1.5
CVE-2013-7309
–
1%
Jan 23
The OSPF implementation in Extreme Networks EXOS does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before performing…
Affected: All versions, or not specified
Showing 5