Summary
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Extreme Networks ExtremeXOS ausnutzen, um Administratorrechte zu erlangen, Sicherheitsmaßnahmen zu umgehen oder Daten zu manipulieren.
Product
ExtremeXOS ist das Betriebssystem, das in Netzwerk-Switches von Extreme Networks verwendet wird.
Vulnerabilities 2
-
High 8.7
ExtremeXOS Debug-Mode Privilege Escalation via Weak PRNG
ExtremeXOS (EXOS) uses a challenge-response mechanism to authorize access to the privileged debug-mode function. The challenge value is generated using an insufficiently random source, which under certain conditions may allow an attacker to predict the expect…
-
High 8.7
ExtremeXOS Privilege Escalation via Symlink Following in File Utilities
The mv, cp, and rm file utilities exposed within the ExtremeXOS (EXOS) shell environment fail to safely canonicalize paths and follow symbolic links outside of the intended privilege boundary. An attacker with low-privilege CLI access can create a symbolic li…
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2026-46047, EUVD-2026-46048
-
#1
Initiale Fassung
References
-
Extreme Security Advisory vom 2026-07-19
https://extreme-networks.my.site.com/ExtrArticleDetail?an=000137694
-
Extreme Security Advisory vom 2026-07-19
https://extreme-networks.my.site.com/ExtrArticleDetail?an=000137696