← Back

Aerohive Netconfig

aerohive_netconfig

Vendor: Extremenetworks • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-16152
1Extremenetworks
1Aerohive Netconfig
Nov 21, 2024
Nov 14, 2021
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
The NetConfig UI administrative interface in Extreme Networks ExtremeWireless Aerohive HiveOS and IQ Engine through 10.0r8a allows attackers to execute PHP code as the root user via remote HTTP requests that insert this...Show more
The NetConfig UI administrative interface in Extreme Networks ExtremeWireless Aerohive HiveOS and IQ Engine through 10.0r8a allows attackers to execute PHP code as the root user via remote HTTP requests that insert this code into a log file and then traverse to that file.Show less