CVE-2023-43118

Summary

CVE-2023-43118 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Extreme Networks Switch Engine (EXOS) in versions before 32.5.1.5. This issue permits attackers to execute arbitrary code and potentially cause unspecified impacts by exploiting the /jsonrpc API. The Chalet application is the targeted component. The vulnerability has been rectified in versions 31.7.2 and 32.5.1.5.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.