CVE-2023-46271: Extreme Networks AP410C ah_webui Missing Authentication for Critical Function Remote Code Execution Vulnerability
Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has a buffer overflow. This issue arises from the ahwebui service, which listens on TCP port 3009 by default.
Other sources
This vulnerability allows network-adjacent attackers to reach critical functions on affected installations of Extreme Networks AP410C routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ahwebui service, which listens on TCP port 3009 by default. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code within the context of root.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-46271?
CVE-2023-46271 is classified as a critical vulnerability due to its potential to allow network-adjacent attackers to exploit buffer overflow conditions.
How do I fix CVE-2023-46271?
To fix CVE-2023-46271, users should upgrade to Extreme Networks IQ Engine version 10.6r5 or later.
What services are affected by CVE-2023-46271?
CVE-2023-46271 affects the ah_webui service running on TCP port 3009.
Which products are impacted by CVE-2023-46271?
The vulnerability CVE-2023-46271 primarily impacts the Extreme Networks AP410C product.
Can CVE-2023-46271 be exploited remotely?
CVE-2023-46271 can be exploited by network-adjacent attackers, which means an attacker must have access to the same network segment.