CVE-2020-36907: Extreme Networks Aerohive HiveOS <=11.x 11.x Unauthenticated Remote Denial of Service
Aerohive HiveOS contains a denial of service vulnerability in the NetConfig UI that allows unauthenticated attackers to render the web interface unusable. Attackers can send a crafted HTTP request to the action.php5 script with specific parameters to trigger a 5-minute service disruption.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-36907?
CVE-2020-36907 has a severity rating that indicates it can lead to a denial of service, impacting the availability of the NetConfig UI.
How do I fix CVE-2020-36907?
To fix CVE-2020-36907, update to the latest version of Aerohive HiveOS that addresses this vulnerability.
Who is affected by CVE-2020-36907?
CVE-2020-36907 affects users of Extreme Networks Aerohive HiveOS versions up to 11.x.
What type of attacks can exploit CVE-2020-36907?
CVE-2020-36907 can be exploited by sending crafted HTTP requests to the action.php5 script, leading to service disruption.
Can CVE-2020-36907 be exploited remotely?
Yes, CVE-2020-36907 can be exploited remotely by unauthenticated attackers.