Jason Goss

**Name of the Vulnerable Software and Affected Versions** Extreme XOS versions 22.6.1.4 and earlier **Description** A read-only user can escalate privileges to root via a crafted HTTP POST request to the `python` method of the Machine-to-Machine Interface (MMI). **Recommendations** For Extreme XOS versions 22.6.1.4 and earlier, as a temporary workaround, consider restricting access to the `python` method of the Machine-to-Machine Interface (MMI) until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.