Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 04/10/2023 Updated: 10/10/2023

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 0

IQ Engine prior to 10.6r2 on Extreme Network AP devices has a Buffer Overflow.

Vulnerable Product	Search on Vulmon	Subscribe to Product
extremenetworks iq_engine

PoC Exploit for CVE-2023-35803 Unauthenticated Buffer Overflow in Aerohive HiveOS/Extreme Networks IQ Engine

CVE-2023-35803 - Unauthenticated RCE in Extreme Networks/Aerohive Wireless Access Points PoC for ARM-based access points running HiveOS/IQ Engine <106r2 Edit revshell to point to your shell catcher IP/port Host the reverse shell: python3 -m httpserver Open a shell catcher: nc -lvnp 1337 Run the POC (may take a few minutes): python3 pocpy <ip of ap> &qu

CWE-120 https://community.extremenetworks.com/t5/security-advisories-formerly/sa-2023-067-iq-engine-acsd-service-buffer-overflow-cve-2023/ba-p/96472 https://nvd.nist.gov https://github.com/lachlan2k/CVE-2023-35803 https://www.zerodayinitiative.com/advisories/ZDI-23-1017/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-35803

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect