Description
Extreme Networks Switch Engine (EXOS) 是一款面向混合网络环境的管理软件平台Extreme Networks Switch Engine (EXOS) 32.5.1.5 之前、22.7 之前和 31.7.2 之前版本中发现目录遍历漏洞，该漏洞允许攻击者读取任意文件。
Extreme Networks EXOS 任意文件读取漏洞(CVE-2023-43121)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-43121
https://extreme-networks.my.site.com/ExtrArticleDetail?an=000114376
https://community.extremenetworks.com/t5/security-advisories-formerly/sa-2023-101-chalet-directory-traversal-vulnerability-cve-2023/ba-p/97501
https://rhinosecuritylabs.com/research/extreme-networks-extremexos-vulnerabilities/
https://github.com/RhinoSecurityLabs/CVEs/blob/master/CVE-2023-43121
https://avd.aliyun.com/detail?id=AVD-2023-43121
https://cve.imfht.com/detail/CVE-2023-43121
https://www.nsfocus.net/vulndb/87284
https://www.tenable.com/cve/CVE-2023-43121
https://www.cve.org/CVERecord?id=CVE-2023-43121