CVE-2018-5794 An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is No Authentication for the AeroScout Service via a crafted UDP packet.
MediumCVSS 5.3
EPSS 0.81%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is No Authentication for the AeroScout Service via a crafted UDP packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| extremewireless wing | >= 5.0, < 5.8.6.9 | 5.8.6.9 |
| extremewireless wing | >= 5.9.0, < 5.9.1.3 | 5.9.1.3 |
References
- gtacknowledge.extremenetworks.com mitigation vendor-advisory