CVE-2023-35802
15.07.2023, 02:15
IQ Engine before 10.6r1 on Extreme Network AP devices has a Buffer Overflow in the implementation of the CAPWAP protocol that may be exploited to obtain elevated privileges to conduct remote code execution. Access to the internal management interface/subnet is required to conduct the exploit.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| extremenetworks | iq_engine | 𝑥 < 10.6r1 |
| extremenetworks | iq_engine | 𝑥 < 10.6r5 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| extremenetworks | iq_engine | 𝑥 < 10.6r2 | ADP |