PT-2024-14990 · Extreme Networks · Extreme Xds

Published 2024-04-05 · Updated 2024-09-26 · CVE-2023-6522

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Extreme XDS versions before 3914

Description The issue affects ExtremePacs Extreme XDS, allowing collection of data as provided by users due to improper privilege management.

Recommendations For versions before 3914, update to version 3914 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-648

Related Identifiers

CVE-2023-6522

Affected Products

Extreme Xds

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2023-6522 · Security Note
• https://twitter.com/VulmonFeeds/status/1776255852510384538 · Twitter Post
• https://t.me/cvenotify/96115 · Telegram Post
• https://twitter.com/cracbot/status/1776506074612310455 · Twitter Post
• https://t.me/cvenotify/75823 · Telegram Post
• https://usom.gov.tr/bildirim/tr-24-0276 · Note
• https://twitter.com/CVEnew/status/1776216440137282031 · Twitter Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-0276 · Note