CVE-2023-43118

8.8 highEPSS 0.3%

High (8.8) in extremenetworks exos. EPSS 0.3% chance of exploitation in the next 30 days.

Cross Site Request Forgery (CSRF) vulnerability in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, fixed in 31.7.2 and 32.5.1.5 allows attackers to run arbitrary code and cause other unspecified impacts via /jsonrpc API.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2023-10-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

extremenetworks:exos

References

https://extreme-networks.my.site.com/ExtrArticleDetail?an=000114379
https://extreme-networks.my.site.com/ExtrArticleDetail?an=000114379

Check your stack JSON