Summary
An issue was discovered in Extreme Networks IQ Engine (HiveOS) before 10.7r5. With access granted to an authenticated user, arbitrary command execution is possible through exploitation of the Client-SSID setting command. This may allow unsanitized commands through newline injection.
Products Potentially Affected
|
OS/Product
|
Exposure
|
|
IQ Engine (HiveOS)
|
Yes
|
Repair Recommendations
- Fixed in 10.7r5 or later.
Please see the full Security Advisory article here for more details and future updates.
