CVE-2018-5797

An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is an Smint_encrypt Hardcoded AES Key that can be used for packet decryption (obtaining cleartext credentials) by an attacker who has access to a wired port.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2018-02-05

Last modified

2024-08-05

Weaknesses

CWE-798

Affected products

• Extremewireless Wing (Extremenetworks)

References

• https://gtacknowledge.extremenetworks.com/articles/Vulnerability_Notice/VN-2018-003