cve.bz

CVE-2020-16152

9.8 criticalEPSS 36%

Critical (9.8) in extremenetworks aerohive netconfig. EPSS 36% chance of exploitation in the next 30 days.

The NetConfig UI administrative interface in Extreme Networks ExtremeWireless Aerohive HiveOS and IQ Engine through 10.0r8a allows attackers to execute PHP code as the root user via remote HTTP requests that insert this code into a log file and then traverse to that file.

Severity

CVSS 3.1

9.8 critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
36% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE
CWE-829
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON