CVE-2023-35802 (iq_engine)

IQ Engine before 10.6r1 on Extreme Network AP devices has a Buffer Overflow in the implementation of the CAPWAP protocol that may be exploited to obtain elevated privileges to conduct remote code execution. Access to the internal management interface/subnet is required to conduct the exploit.

access buffer buffer overflow capwap code code execution cve devices engine exploit exploited implementation interface internal management may network overflow privileges protocol remote code remote code execution subnet