Extremenetworks
Extremenetworks Extremexos: vulnerabilidades y CVE
Extremenetworks Extremexos tiene 10 vulnerabilidades publicadas, 1 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE10
Últimos 12 meses1
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-8170 | Alta (8.7) | 0.56% | — | 20 jul 2026 | The mv, cp, and rm file utilities exposed within the ExtremeXOS (EXOS) shell environment fail to safely canonicalize paths and follow symbolic links outside of the intended privilege boundary. An attacker with… |
| CVE-2023-40457 | Sin puntuar | 0.30% | — | 11 nov 2024 | The BGP daemon in Extreme Networks ExtremeXOS (aka EXOS) 30.7.1.1 allows an attacker (who is not on a directly connected network) to cause a denial of service (BGP session reset) because of BGP attribute error… |
| CVE-2020-18305 | Alta (8) | 0.70% | — | 14 may 2024 | Extreme Networks EXOS before v.22.7 and before v.30.2 was discovered to contain an issue in its Web GUI which fails to restrict URL access, allowing attackers to access sensitive information or escalate privileges. |
| CVE-2024-27453 | Alta (8.6) | 0.73% | — | 3 may 2024 | In Extreme XOS through 22.6.1.4, a read-only user can escalate privileges to root via a crafted HTTP POST request to the python method of the Machine-to-Machine Interface (MMI). |
| CVE-2017-14332 | Alta (8.1) | 1.0% | — | 23 oct 2017 | Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to hijack sessions by determining SessionID values. |
| CVE-2017-14331 | Media (6.7) | 0.37% | — | 23 oct 2017 | Extreme EXOS 16.x, 21.x, and 22.x allows administrators to bypass the "exsh restricted shell" protection mechanism and obtain an interactive shell. |
| CVE-2017-14330 | Media (6.7) | 0.32% | — | 23 oct 2017 | Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving a privileged process. |
| CVE-2017-14329 | Media (6.7) | 0.27% | — | 23 oct 2017 | Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving an exsh debug shell. |
| CVE-2017-14328 | Alta (7.5) | 1.3% | — | 23 oct 2017 | Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to trigger a buffer overflow leading to a reboot. |
| CVE-2017-14327 | Media (4.4) | 0.34% | — | 23 oct 2017 | Extreme EXOS 16.x, 21.x, and 22.x allows administrators to read arbitrary files. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.