CVE-2023-35802
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk55th percentile - higher than 55% of all known CVEs
Summary
IQ Engine before version 10.6r1 on Extreme Network AP devices has a Buffer Overflow in the implementation of the CAPWAP protocol that may be exploited to obtain elevated privileges for remote code execution.
Risk Assessment
There is a risk of unauthorized access to systems, which may lead to serious security breaches.
Recommendation
It is recommended to update the IQ Engine to version 10.6r1 or later and restrict access to the internal management interface.
Original NVD description (English source)
IQ Engine before 10.6r1 on Extreme Network AP devices has a Buffer Overflow in the implementation of the CAPWAP protocol that may be exploited to obtain elevated privileges to conduct remote code execution. Access to the internal management interface/subnet is required to conduct the exploit.