CVE-2017-14327: Infoleak
Published Oct 23, 2017
·Updated
Extreme EXOS 16.x, 21.x, and 22.x allows administrators to read arbitrary files.
Affected Software
16 affected components
Extremenetworks Extremexos=16.1.2
Extremenetworks Extremexos=16.1.3
Extremenetworks Extremexos=16.1.4
Extremenetworks Extremexos=16.2
Extremenetworks Extremexos=16.2.2
Extremenetworks Extremexos=16.2.3
Extremenetworks Extremexos=16.2.4
Extremenetworks Extremexos=21.1
Extremenetworks Extremexos=21.1.1
Extremenetworks Extremexos=21.1.2
Extremenetworks Extremexos=21.1.3
Extremenetworks Extremexos=21.1.4
Extremenetworks Extremexos=22.1
Extremenetworks Extremexos=22.2
Extremenetworks Extremexos=22.3
Extremenetworks Extremexos=22.4
Event History
Oct 23, 2017
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-14327?
CVE-2017-14327 has a CVSS score that indicates a high severity risk due to the ability for unauthorized file access.
2
How do I fix CVE-2017-14327?
To fix CVE-2017-14327, upgrade to a patched version of Extreme EXOS that resolves this file reading vulnerability.
3
Which versions of Extreme EXOS are affected by CVE-2017-14327?
CVE-2017-14327 affects Extreme EXOS versions 16.x, 21.x, and 22.x including specific releases like 16.1.2, 21.1.1, and 22.4.
4
What kinds of files can be accessed due to CVE-2017-14327?
Due to CVE-2017-14327, unauthorized users can potentially read any arbitrary file on the affected systems.
5
Who is primarily affected by CVE-2017-14327?
Network administrators using vulnerable versions of Extreme EXOS are primarily affected by CVE-2017-14327.