How severe is CVE-2023-40457?

This vulnerability has a severity rating of NONE with a CVSS score of N/A out of 10.

What type of vulnerability is CVE-2023-40457?

This is classified as CWE-209, which is a common weakness in software security.

CVE-2023-40457 - NONE Severity | CVSS N/A

Vulnerability Description

The BGP daemon in Extreme Networks ExtremeXOS (aka EXOS) 30.7.1.1 allows an attacker (who is not on a directly connected network) to cause a denial of service (BGP session reset) because of BGP attribute error mishandling (for attribute 21 and 25). NOTE: the vendor disputes this because it is "evaluating support for RFC 7606 as a future feature" and believes that "customers that have chosen to not require or implement RFC 7606 have done so willingly and with knowledge of what is needed to defend against these types of attacks."

Related Vulnerabilities

CVE-2017-7551

CRITICAL

CVSS:9.8(Critical)

389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks during account lockout due to different return codes returned on password attempts.

CWE-2092017

CVE-2017-7945

CRITICAL

CVSS:9.8(Critical)

The GlobalProtect external interface in Palo Alto Networks PAN-OS before 6.1.17, 7.x before 7.0.15, 7.1.x before 7.1.9, and 8.x before 8.0.2 provides different error messages for failed login attempts...

CWE-2092017

CVE-2018-11325

CRITICAL

CVSS:9.8(Critical)

An issue was discovered in Joomla! Core before 3.8.8. The web install application would autofill password fields after either a form validation error or navigating to a previous install step, and disp...

CWE-2092018

CVE-2018-14925

CRITICAL

CVSS:9.8(Critical)

Matera Banco 1.0.0 mishandles Java errors in the backend, as demonstrated by a stack trace revealing use of net.sf.acegisecurity components.

CWE-2092018

CVE-2019-7612

CRITICAL

CVSS:9.8(Critical)

A sensitive data disclosure flaw was found in the way Logstash versions before 5.6.15 and 6.6.1 logs malformed URLs. If a malformed URL is specified as part of the Logstash configuration, the credenti...

CWE-2092019

CVE-2019-7644

CRITICAL

CVSS:9.8(Critical)

Auth0 Auth0-WCF-Service-JWT before 1.0.4 leaks the expected JWT signature in an error message when it cannot successfully validate the JWT signature. If this error message is presented to an attacker,...

CWE-2092019