EX
Product
Extremexos
8
CVEs
0
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 4Low 0
Watch
Add Extremexos to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-27453 | 8.6 | May 3 | In Extreme XOS through 22.6.1.4, a read-only user can escalate privileges to root via a crafted HTTP POST request to the python method of the Machine-to-Machine Interface (MMI) Affected: before 22.7 |
| CVE-2017-14332 | 8.1 | Oct 23 | Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to hijack sessions by determining SessionID values Affected: 15.7; 16.1.2; 16.1.3; 16.1.4; 16.2; 16.2.2; +11 more |
| CVE-2020-18305 | 8.0 | May 14 | Extreme Networks EXOS before v.22.7 and before v.30.2 was discovered to contain an issue in its Web GUI which fails to restrict URL access, allowing attackers to access sensitive… Affected: before 22.7; 30.1 |
| CVE-2017-14328 | 7.5 | Oct 23 | Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to trigger a buffer overflow leading to a reboot Affected: 15.7; 16.1; 16.1.2; 16.1.2; 16.1.2; 16.1.3; +34 more |
| CVE-2017-14331 | 6.7 | Oct 23 | Extreme EXOS 16.x, 21.x, and 22.x allows administrators to bypass the "exsh restricted shell" protection mechanism and obtain an interactive shell Affected: 15.7; 16.1.2; 16.1.3; 16.1.4; 16.2; 16.2.2; +11 more |
| CVE-2017-14330 | 6.7 | Oct 23 | Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving a privileged process Affected: 15.7; 16.1.2; 16.1.3; 16.1.4; 16.2; 16.2.2; +11 more |
| CVE-2017-14329 | 6.7 | Oct 23 | Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving an exsh debug shell Affected: 15.7; 16.1.2; 16.1.3; 16.1.4; 16.2; 16.2.2; +11 more |
| CVE-2017-14327 | 4.4 | Oct 23 | Extreme EXOS 16.x, 21.x, and 22.x allows administrators to read arbitrary files Affected: 16.1.2; 16.1.3; 16.1.4; 16.2; 16.2.2; 16.2.3; +10 more |
Showing 8