CVE-2018-5794: Extremewireless Wing

Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days.

An issue was discovered in Extreme Networks ExtremeWireless WiNG 5.x before 5.8.6.9 and 5.9.x before 5.9.1.3. There is No Authentication for the AeroScout Service via a crafted UDP packet.

Affected products

  • Extremewireless Wing: from 5.0, before 5.8.6.9 (fixed in 5.8.6.9); from 5.9.0, before 5.9.1.3 (fixed in 5.9.1.3)

Published 2018-02-05. Last modified 2026-06-17.