extreme-networks.my.site.com
https://extreme-networks.my.site.com/ExtrArticleDetail?an=000114378 CVE-2023-43119
CRITICAL
Record summary
CVE-2023-43119 has a selected CVSS score of 9.8 (critical); EIP currently links 1 curated repository PoC.
Description
An Access Control issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, also fixed in 22.7, 31.7.2 allows attackers to gain escalated privileges using crafted telnet commands via Redis server.
Description source: CVE List
Exploitation context
Available material
- Curated repository PoCs
- 1
CISA SSVC decision
ExploitationNone
AutomatableYes
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Sep 17, 2024 · Source: CVE List
Proofs of concept
1Curated repository PoCs
GitHubCVE-2023-43119Curated repository PoCby RhinoSecurityLabsStars: 905Not analyzed3 files
References
2nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2023-43119