high7.5
CVE-2018-5789
An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3.
Impact
An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is a Remote, Unauthenticated XML Entity Expansion Denial of Service on the WiNG Access Point / Controller via crafted XML entities to the Web User Interface.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Extremewireless | Wing | from 5.0 before 5.8.6.9 from 5.9.0 before 5.9.1.3 |