high7.5
CVE-2018-5797
An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3.
Impact
An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is an Smint_encrypt Hardcoded AES Key that can be used for packet decryption (obtaining cleartext credentials) by an attacker who has access to a wired port.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Extremenetworks | Extremewireless Wing | from 5.0 before 5.8.6.9 from 5.9.0 before 5.9.1.3 |