CVE-2020-36907: falha de alta gravidade em Extreme Networks Aerohive HiveOS
Extreme Networks Aerohive HiveOS <=11.x 11.x Unauthenticated Remote Denial of Service
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.7epss 0.5%
Aerohive HiveOS contains a denial of service vulnerability in the NetConfig UI that allows unauthenticated attackers to render the web interface unusable. Attackers can send a crafted HTTP request to the action.php5 script with specific parameters to trigger a 5-minute service disruption.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Extreme Networks · Aerohive HiveOSReferências
https://advisories.ncsc.nl/2020/ncsc-2020-0367.htmlhttps://community.extremenetworks.com/t5/iq-engine-hive-os-announcements/bg-p/IQ_Engine_Hive_OS_Announcementshttps://exchange.xforce.ibmcloud.com/vulnerabilities/181649https://packetstorm.news/files/id/157587https://www.exploit-db.com/exploits/48441https://www.extremenetworks.comhttps://www.vulncheck.com/advisories/extreme-networks-aerohive-hiveos-x-x-unauthenticated-remote-denial-of-servicehttps://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5566.php