Buffer overflow in Extremewireless Wing

CVE-2018-5790

An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is Remote, Unauthenticated "Global" Denial of Service in the RIM (Radio Interface Module) over the MINT (Media Independent Tunnel) Protocol on the WiNG Access Point via crafted packets.

Vulnerability class: Buffer Overflow

EPSS: 0.004 (34.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2018-5790?
CVE-2018-5790 is a medium-severity vulnerability in Extremewireless Wing, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 5.3/10. Published 2018-02-05.
How severe is CVE-2018-5790?
Medium severity. CVSS v3 base score is 5.3 out of 10.