CVE-2020-36907highCWE-770

CVE-2020-36907: high-severity vulnerability in Extreme Networks Aerohive HiveOS

Extreme Networks Aerohive HiveOS <=11.x 11.x Unauthenticated Remote Denial of Service

Published · Updated

Follow this CVE+ Monitor Aerohive HiveOS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.7epss 0.5%
Aerohive HiveOS contains a denial of service vulnerability in the NetConfig UI that allows unauthenticated attackers to render the web interface unusable. Attackers can send a crafted HTTP request to the action.php5 script with specific parameters to trigger a 5-minute service disruption.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected products
Extreme Networks · Aerohive HiveOS