Description
In Extreme XOS through 22.6.1.4, a read-only user can escalate privileges to root via a crafted HTTP POST request to the python method of the Machine-to-Machine Interface (MMI).
Advisories 1
- WID-SEC-2024-0993 Extreme Networks ExtremeXOS: Schwachstelle ermöglicht Privilegieneskalation BSI CERT-Bund (WID) · Apr 29, 2024