CVE-2017-14332: High severity extreme networks exos vulnerability
Published Oct 23, 2017
·Updated
Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to hijack sessions by determining SessionID values.
Affected Software
17 affected components
Extremenetworks Extremexos=15.7
Extremenetworks Extremexos=16.1.2
Extremenetworks Extremexos=16.1.3
Extremenetworks Extremexos=16.1.4
Extremenetworks Extremexos=16.2
Extremenetworks Extremexos=16.2.2
Extremenetworks Extremexos=16.2.3
Extremenetworks Extremexos=16.2.4
Extremenetworks Extremexos=21.1
Extremenetworks Extremexos=21.1.1
Extremenetworks Extremexos=21.1.2
Extremenetworks Extremexos=21.1.3
Extremenetworks Extremexos=21.1.4
Extremenetworks Extremexos=22.1
Extremenetworks Extremexos=22.2
Extremenetworks Extremexos=22.3
Extremenetworks Extremexos=22.4
Event History
Oct 23, 2017
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-14332?
CVE-2017-14332 is classified as a high-severity vulnerability due to its potential to allow remote attackers to hijack sessions.
2
How do I fix CVE-2017-14332?
To fix CVE-2017-14332, users should update to the latest version of Extreme EXOS that addresses this vulnerability.
3
Which versions of Extreme EXOS are affected by CVE-2017-14332?
CVE-2017-14332 affects Extreme EXOS versions 15.7, 16.x, 21.x, and 22.x.
4
What type of attack does CVE-2017-14332 enable?
CVE-2017-14332 enables remote session hijacking attacks due to predictable SessionID values.
5
Is there a workaround for CVE-2017-14332?
Currently, the only effective mitigation for CVE-2017-14332 is to apply patches provided by Extreme Networks.