CVE-2017-14330: High severity extreme networks exos vulnerability
Published Oct 23, 2017
·Updated
Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving a privileged process.
Affected Software
17 affected components
Extremenetworks Extremexos=15.7
Extremenetworks Extremexos=16.1.2
Extremenetworks Extremexos=16.1.3
Extremenetworks Extremexos=16.1.4
Extremenetworks Extremexos=16.2
Extremenetworks Extremexos=16.2.2
Extremenetworks Extremexos=16.2.3
Extremenetworks Extremexos=16.2.4
Extremenetworks Extremexos=21.1
Extremenetworks Extremexos=21.1.1
Extremenetworks Extremexos=21.1.2
Extremenetworks Extremexos=21.1.3
Extremenetworks Extremexos=21.1.4
Extremenetworks Extremexos=22.1
Extremenetworks Extremexos=22.2
Extremenetworks Extremexos=22.3
Extremenetworks Extremexos=22.4
Event History
Oct 23, 2017
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-14330?
CVE-2017-14330 is rated as a high severity vulnerability due to the potential for unauthorized root access.
2
How do I fix CVE-2017-14330?
To fix CVE-2017-14330, update to a non-vulnerable version of Extreme EXOS as outlined in the vendor's security advisory.
3
Which versions of Extreme EXOS are affected by CVE-2017-14330?
CVE-2017-14330 affects Extreme EXOS versions 15.7, 16.x, 21.x, and 22.x.
4
Can CVE-2017-14330 be exploited remotely?
Yes, CVE-2017-14330 can potentially be exploited remotely, allowing attackers to gain root shell access.
5
What are the potential impacts of CVE-2017-14330?
The potential impacts of CVE-2017-14330 include unauthorized access to system controls and sensitive data compromise.