CVE-2023-43119

9.8 criticalEPSS 0.8%

Critical (9.8) in extremenetworks exos. EPSS 0.8% chance of exploitation in the next 30 days.

An Access Control issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, also fixed in 22.7, 31.7.2 allows attackers to gain escalated privileges using crafted telnet commands via Redis server.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWEs: CWE-863, CWE-284
Published: 2023-10-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

extremenetworks:exos

References

https://extreme-networks.my.site.com/ExtrArticleDetail?an=000114378
https://extreme-networks.my.site.com/ExtrArticleDetail?an=000114378

Check your stack JSON