CVE-2005-1670

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-05-19 · updated 2026-06-16

Description

Unknown vulnerability in Extreme BlackDiamond 10808 and 8800 switches running ExtremeWare XOS 11.1 before 11.1.3.3, 11.0 before 11.0.2.4, and 10.x allows remote authenticated users to execute arbitrary commands.

Affected products

extremenetworks Extremeware Xos: from 10.0 through 10.1; from 11.0 before 11.0.2.4; from 11.1 before 11.1.3.3 — fixed in 11.0.2.4, 11.1.3.3

How to fix

Upgrade to a fixed version: extremenetworks Extremeware Xos 11.0.2.4, 11.1.3.3. Check the vendor advisory for mitigations.

References

http://secunia.com/advisories/15438
http://www.extremenetworks.com/services/documentation/FieldNotices_FN0215-Security_Alert_EXOS.asp
http://www.kb.cert.org/vuls/id/937838
http://www.vupen.com/english/advisories/2005/0572
http://secunia.com/advisories/15438
http://www.extremenetworks.com/services/documentation/FieldNotices_FN0215-Security_Alert_EXOS.asp
http://www.kb.cert.org/vuls/id/937838
http://www.vupen.com/english/advisories/2005/0572

Get alerted when CVE-2005-1670 or the next vulnerability affects your stack