An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is No Authentication for the AeroScout Service via a crafted UDP packet.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Wing | Extremewireless | 5.0 (including) | 5.8.6.9 (excluding) |
| Wing | Extremewireless | 5.9.0 (including) | 5.9.1.3 (excluding) |