CVE-2024-27453

In Extreme XOS through 22.6.1.4, a read-only user can escalate privileges to root via a crafted HTTP POST request to the python method of the Machine-to-Machine Interface (MMI).

CVSS v3.1

8.6 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

EPSS

0.73% chance of exploitation in the next 30 days, 52th percentile

Published

2024-05-03

Updated

2024-08-02

Proof-of-concept exploits (1)

• https://www.exsiliumsecurity.com/CVE-2024-27453.html

References

• CVE Record
• NVD entry

Related

• CVE-2024-27448
• CVE-2024-27460
• CVE-2024-27443
• CVE-2024-27474
• CVE-2024-2744
• CVE-2024-27476