Record summary

CVE-2023-43119 has a selected CVSS score of 9.8 (critical); EIP currently links 1 curated repository PoC.

Description

An Access Control issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, also fixed in 22.7, 31.7.2 allows attackers to gain escalated privileges using crafted telnet commands via Redis server.

Description source: CVE List

Exploitation context

Available material

Curated repository PoCs
1

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 17, 2024 · Source: CVE List

Proofs of concept

1

Curated repository PoCs

GitHubCVE-2023-43119Curated repository PoCby RhinoSecurityLabsStars: 905Not analyzed3 files

Python · 24.2 KiB

GitHub

PoC details

References

2