What is CVE-2020-18305?

CVE-2020-18305 is a high-severity vulnerability in Extremenetworks Extremexos, classified under Improper Authentication. CVSS score: 8.0/10. Published 2024-05-14.

How severe is CVE-2020-18305?

High severity. CVSS v3 base score is 8.0 out of 10.

Auth bypass in Extremenetworks Extremexos

CVE-2020-18305

Extreme Networks EXOS before v.22.7 and before v.30.2 was discovered to contain an issue in its Web GUI which fails to restrict URL access, allowing attackers to access sensitive information or escalate privileges.

Vulnerability class: Broken Authentication

EPSS: 0.007 (48.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.0 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H.

Affected products

Extremenetworks Extremexos — versions 30.1
N/a — versions n/a

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

cve@mitre.org (Exploit)

Frequently asked questions

What is CVE-2020-18305?: CVE-2020-18305 is a high-severity vulnerability in Extremenetworks Extremexos, classified under Improper Authentication. CVSS score: 8.0/10. Published 2024-05-14.
How severe is CVE-2020-18305?: High severity. CVSS v3 base score is 8.0 out of 10.