CVE-2023-46272

State: Published
Severity: 8.8 High
Published: Feb 19, 2025
Updated: Feb 20, 2025
Reserved: Oct 20, 2023

Description

Buffer Overflow vulnerability in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, allows an attacker to execute arbitrary code via the implementation of the ah_auth service

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-121 Stack-based Buffer Overflow

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://extreme-networks.my.site.com/ExtrArticleDetail?an=000115355&q=CVE-2023-46272
https://www.zerodayinitiative.com/advisories/ZDI-23-1765/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.