CVE-2018-5789 An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is a Remote, Unauthenticated XML Entity Expansion Denial of Service on the WiNG Acce...
HighCVSS 7.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is a Remote, Unauthenticated XML Entity Expansion Denial of Service on the WiNG Access Point / Controller via crafted XML entities to the Web User Interface.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| extremewireless wing | >= 5.0, < 5.8.6.9 | 5.8.6.9 |
| extremewireless wing | >= 5.9.0, < 5.9.1.3 | 5.9.1.3 |
References
- gtacknowledge.extremenetworks.com mitigation vendor-advisory