CVE-2023-35802
Critical
Description
IQ Engine before 10.6r1 on Extreme Network AP devices has a Buffer Overflow in the implementation of the CAPWAP protocol that may be exploited to obtain elevated privileges to conduct remote code execution. Access to the internal management interface/subnet is required to conduct the exploit.
SeverityCritical
CVSS9.8
Exploit probability—
ProductExtremenetworks Iq Engine
PublishedJul 15, 2023
First seenJul 15, 2023
How to fix
Update
- extremenetworks iq_engine10.6r1, 10.6r5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| extremenetworks iq_engine | v < 10.6r1, v < 10.6r5 | 10.6r1, 10.6r5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.