CVE-2023-35803

CRITICAL

Extreme Networks IQ Engine < 10.6r2 - Buffer Overflow in acsd Service

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2023-35803. PoCs published by lachlan2k.

AI-analyzed exploit summary This PoC exploits an unauthenticated RCE vulnerability in Extreme Networks/Aerohive Wireless Access Points running HiveOS/IQ Engine <10.6r2. It leverages a buffer overflow to execute arbitrary commands via a crafted payload sent to port 5916.

Description

IQ Engine before 10.6r2 on Extreme Network AP devices has a Buffer Overflow.

Exploits (1)

nomisec WORKING POC 23 stars

by lachlan2k · poc

https://github.com/lachlan2k/CVE-2023-35803

View Code ZIP pw:eip

This PoC exploits an unauthenticated RCE vulnerability in Extreme Networks/Aerohive Wireless Access Points running HiveOS/IQ Engine <10.6r2. It leverages a buffer overflow to execute arbitrary commands via a crafted payload sent to port 5916.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Racy

Target: Extreme Networks/Aerohive Wireless Access Points (HiveOS/IQ Engine <10.6r2)

No auth needed

Prerequisites: Network access to the target device · Target device running vulnerable firmware

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1

Core References

Vendor Advisory

https://community.extremenetworks.com/t5/security-advisories-formerly/sa-2023-067-iq-engine-acsd-service-buffer-overflow-cve-2023/ba-p/96472

Scores

CVSS v3 9.8

EPSS 0.0163

EPSS Percentile 73.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

CWE

CWE-120

Status published

Products (1)

extremenetworks/iq_engine < 10.6r2

Published Oct 04, 2023

Tracked Since Feb 18, 2026