VULNERABILITY INTELLIGENCE

CVE-2023-43119

CVSS score9.8 CRITICAL
EPSS probability0.75%
CISA KEVNot currently listed
Published2023-10-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An Access Control issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, also fixed in 22.7, 31.7.2 allows attackers to gain escalated privileges using crafted telnet commands via Redis server.

Weakness classification

  • CWE-284: Improper Access Control
  • CWE-863: Incorrect Authorization

Primary references