GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for IQ Engine by extremenetworks

    CVE-2023-46273 (GCVE-0-2023-46273)

    Vulnerability from nvd – Published: 2026-09-14 00:00 – Updated: 2026-09-14 05:58
    VLAI
    Summary
    Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has an ah_bgd buffer overflow via ah_event_send.
    CWE
    • CWE-121 - Stack-based Buffer Overflow
    Impacted products
    Vendor Product Version
    extremenetworks IQ Engine Affected: 0 , < 10.6r1a (custom)
    Affected: 10.6r2 , < 10.6r5 (custom)
        cpe:2.3:a:extremenetworks:iq_engine:*:*:*:*:*:*:*:*
        cpe:2.3:a:extremenetworks:iq_engine:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "IQ Engine",
              "vendor": "extremenetworks",
              "versions": [
                {
                  "lessThan": "10.6r1a",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                },
                {
                  "lessThan": "10.6r5",
                  "status": "affected",
                  "version": "10.6r2",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "cpeApplicability": [
            {
              "nodes": [
                {
                  "cpeMatch": [
                    {
                      "criteria": "cpe:2.3:a:extremenetworks:iq_engine:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "10.6r1a",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:a:extremenetworks:iq_engine:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "10.6r5",
                      "versionStartIncluding": "10.6r2",
                      "vulnerable": true
                    }
                  ],
                  "negate": false,
                  "operator": "OR"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has an ah_bgd buffer overflow via ah_event_send."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 8.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-121",
                  "description": "CWE-121 Stack-based Buffer Overflow",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-14T05:58:31.698Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "url": "https://extremenetworks.com"
            },
            {
              "url": "https://extreme-networks.my.site.com/ExtrArticleDetail?an=000115356"
            }
          ],
          "x_generator": {
            "engine": "enrichogram 0.0.1"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2023-46273",
        "datePublished": "2026-09-14T00:00:00.000Z",
        "dateReserved": "2023-10-20T00:00:00.000Z",
        "dateUpdated": "2026-09-14T05:58:31.698Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2023-46273 (GCVE-0-2023-46273)

    Vulnerability from cvelistv5 – Published: 2026-09-14 00:00 – Updated: 2026-09-14 05:58
    VLAI
    Summary
    Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has an ah_bgd buffer overflow via ah_event_send.
    CWE
    • CWE-121 - Stack-based Buffer Overflow
    Impacted products
    Vendor Product Version
    extremenetworks IQ Engine Affected: 0 , < 10.6r1a (custom)
    Affected: 10.6r2 , < 10.6r5 (custom)
        cpe:2.3:a:extremenetworks:iq_engine:*:*:*:*:*:*:*:*
        cpe:2.3:a:extremenetworks:iq_engine:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "IQ Engine",
              "vendor": "extremenetworks",
              "versions": [
                {
                  "lessThan": "10.6r1a",
                  "status": "affected",
                  "version": "0",
                  "versionType": "custom"
                },
                {
                  "lessThan": "10.6r5",
                  "status": "affected",
                  "version": "10.6r2",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "cpeApplicability": [
            {
              "nodes": [
                {
                  "cpeMatch": [
                    {
                      "criteria": "cpe:2.3:a:extremenetworks:iq_engine:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "10.6r1a",
                      "vulnerable": true
                    },
                    {
                      "criteria": "cpe:2.3:a:extremenetworks:iq_engine:*:*:*:*:*:*:*:*",
                      "versionEndExcluding": "10.6r5",
                      "versionStartIncluding": "10.6r2",
                      "vulnerable": true
                    }
                  ],
                  "negate": false,
                  "operator": "OR"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has an ah_bgd buffer overflow via ah_event_send."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 8.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-121",
                  "description": "CWE-121 Stack-based Buffer Overflow",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-14T05:58:31.698Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "url": "https://extremenetworks.com"
            },
            {
              "url": "https://extreme-networks.my.site.com/ExtrArticleDetail?an=000115356"
            }
          ],
          "x_generator": {
            "engine": "enrichogram 0.0.1"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2023-46273",
        "datePublished": "2026-09-14T00:00:00.000Z",
        "dateReserved": "2023-10-20T00:00:00.000Z",
        "dateUpdated": "2026-09-14T05:58:31.698Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }