CVE-2017-14331: High severity extreme networks exos vulnerability
Published Oct 23, 2017
·Updated
Extreme EXOS 16.x, 21.x, and 22.x allows administrators to bypass the "exsh restricted shell" protection mechanism and obtain an interactive shell.
Affected Software
17 affected components
Extremenetworks Extremexos=15.7
Extremenetworks Extremexos=16.1.2
Extremenetworks Extremexos=16.1.3
Extremenetworks Extremexos=16.1.4
Extremenetworks Extremexos=16.2
Extremenetworks Extremexos=16.2.2
Extremenetworks Extremexos=16.2.3
Extremenetworks Extremexos=16.2.4
Extremenetworks Extremexos=21.1
Extremenetworks Extremexos=21.1.1
Extremenetworks Extremexos=21.1.2
Extremenetworks Extremexos=21.1.3
Extremenetworks Extremexos=21.1.4
Extremenetworks Extremexos=22.1
Extremenetworks Extremexos=22.2
Extremenetworks Extremexos=22.3
Extremenetworks Extremexos=22.4
Event History
Oct 23, 2017
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-14331?
CVE-2017-14331 is rated as a high severity vulnerability due to the potential for unauthorized access to an interactive shell.
2
How do I fix CVE-2017-14331?
To fix CVE-2017-14331, upgrade to the latest versions of Extreme EXOS that are not affected by this vulnerability.
3
Which versions of Extreme EXOS are affected by CVE-2017-14331?
CVE-2017-14331 affects Extreme EXOS versions 16.x, 21.x, and 22.x.
4
What is the impact of exploiting CVE-2017-14331?
Exploiting CVE-2017-14331 allows an attacker to bypass restricted shell protections and gain an interactive shell, leading to potential system compromise.
5
Can I still secure my network if I am using an affected version for CVE-2017-14331?
Yes, you can implement additional security measures and monitoring to mitigate risk until you can upgrade to a fixed version.