Vulnerability-Lookup

CNVD-2018-03322

Vulnerability from cnvd - Published: 2018-02-13

Title

Extreme Networks ExtremeWireless WiNG拒绝服务漏洞

Description

Extreme Networks ExtremeWireless WiNG是美国极进网络（Extreme Networks）公司的一款无线接入解决方案。WiNG Access Point（AP）是其中的一个无线接入点。 Extreme Networks ExtremeWireless WiNG 5.8.6.9之前的5.x版本和5.9.1.3之前的5.9.x版本中的WiNG AP的MINT(Media Independent Tunnel)Protocol存在安全漏洞。攻击者可借助特制的数据包利用该漏洞造成拒绝服务。

Severity

中

Patch Name

Extreme Networks ExtremeWireless WiNG拒绝服务漏洞的补丁

Patch Description

Formal description

厂商已发布漏洞修复程序，请及时关注更新： https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003

Reference

https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003

Impacted products

Name
['Extreme Networks ExtremeWireless WiN 5.x (<5.8.6.9)', 'Extreme Networks ExtremeWireless WiNG 5.9.*，<5.9.1.3']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-5790"
    }
  },
  "description": "Extreme Networks ExtremeWireless WiNG\u662f\u7f8e\u56fd\u6781\u8fdb\u7f51\u7edc\uff08Extreme Networks\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u65e0\u7ebf\u63a5\u5165\u89e3\u51b3\u65b9\u6848\u3002WiNG Access Point\uff08AP\uff09\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u65e0\u7ebf\u63a5\u5165\u70b9\u3002\r\n\r\nExtreme Networks ExtremeWireless WiNG 5.8.6.9\u4e4b\u524d\u76845.x\u7248\u672c\u548c5.9.1.3\u4e4b\u524d\u76845.9.x\u7248\u672c\u4e2d\u7684WiNG AP\u7684MINT(Media Independent Tunnel)Protocol\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u501f\u52a9\u7279\u5236\u7684\u6570\u636e\u5305\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u62d2\u7edd\u670d\u52a1\u3002",
  "discovererName": "IOActive",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-03322",
  "openTime": "2018-02-13",
  "patchDescription": "Extreme Networks ExtremeWireless WiNG\u662f\u7f8e\u56fd\u6781\u8fdb\u7f51\u7edc\uff08Extreme Networks\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u65e0\u7ebf\u63a5\u5165\u89e3\u51b3\u65b9\u6848\u3002WiNG Access Point\uff08AP\uff09\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u65e0\u7ebf\u63a5\u5165\u70b9\u3002\r\n\r\nExtreme Networks ExtremeWireless WiNG 5.8.6.9\u4e4b\u524d\u76845.x\u7248\u672c\u548c5.9.1.3\u4e4b\u524d\u76845.9.x\u7248\u672c\u4e2d\u7684WiNG AP\u7684MINT(Media Independent Tunnel)Protocol\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u501f\u52a9\u7279\u5236\u7684\u6570\u636e\u5305\u5229\u7528\u8be5\u6f0f\u6d1e\u9020\u6210\u62d2\u7edd\u670d\u52a1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Extreme Networks ExtremeWireless WiNG\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Extreme Networks ExtremeWireless WiN 5.x (\u003c5.8.6.9)",
      "Extreme Networks ExtremeWireless WiNG 5.9.*\uff0c\u003c5.9.1.3"
    ]
  },
  "referenceLink": "https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003",
  "serverity": "\u4e2d",
  "submitTime": "2018-02-05",
  "title": "Extreme Networks ExtremeWireless WiNG\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e"
}

CVE-2018-5790 (GCVE-0-2018-5790)

Vulnerability from cvelistv5 – Published: 2018-02-05 04:00 – Updated: 2024-08-05 05:47

Summary

An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is Remote, Unauthenticated "Global" Denial of Service in the RIM (Radio Interface Module) over the MINT (Media Independent Tunnel) Protocol on the WiNG Access Point via crafted packets.

Severity

No CVSS data available.

CWE

Assigner

mitre

References

1 reference

URL	Tags
https://gtacknowledge.extremenetworks.com/article…	x_refsource_CONFIRM

Date Public

2018-02-04 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T05:47:55.369Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-02-04T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is Remote, Unauthenticated \"Global\" Denial of Service in the RIM (Radio Interface Module) over the MINT (Media Independent Tunnel) Protocol on the WiNG Access Point via crafted packets."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-02-05T04:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-5790",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is Remote, Unauthenticated \"Global\" Denial of Service in the RIM (Radio Interface Module) over the MINT (Media Independent Tunnel) Protocol on the WiNG Access Point via crafted packets."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003",
              "refsource": "CONFIRM",
              "url": "https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-5790",
    "datePublished": "2018-02-05T04:00:00.000Z",
    "dateReserved": "2018-01-19T00:00:00.000Z",
    "dateUpdated": "2024-08-05T05:47:55.369Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2018-03322

CVE-2018-5790 (GCVE-0-2018-5790)

Tags

Sightings

Nomenclature