CVE-2024-27453: High severity extreme networks extremexos vulnerability
Published May 3, 2024
·Updated
In Extreme XOS through 22.6.1.4, a read-only user can escalate privileges to root via a crafted HTTP POST request to the python method of the Machine-to-Machine Interface (MMI).
Affected Software
2 affected components
Extreme XOS<=22.6.1.4
Extremenetworks Extremexos<22.7
Event History
May 3, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-27453?
CVE-2024-27453 has been classified as a high severity vulnerability due to the potential for privilege escalation.
2
How do I fix CVE-2024-27453?
To mitigate CVE-2024-27453, upgrade Extreme XOS to version 22.7 or later.
3
Who is affected by CVE-2024-27453?
CVE-2024-27453 affects users of Extreme XOS versions up to and including 22.6.1.4.
4
What is the impact of CVE-2024-27453?
The impact of CVE-2024-27453 allows a read-only user to escalate privileges to root through a crafted HTTP POST request.
5
When was CVE-2024-27453 disclosed?
CVE-2024-27453 was disclosed in 2024.