PT-2025-9915 · Extreme · Extreme Xds

Published 2025-03-06 · Updated 2026-06-02 · CVE-2024-7872

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions Extreme XDS versions prior to 3933

Description The issue allows for the insertion of sensitive information into sent data, enabling the retrieval of embedded sensitive data.

Recommendations For versions prior to 3933, update to version 3933 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-201

Related Identifiers

CVE-2024-7872

Affected Products

Extreme Xds

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-7872 · Security Note
• https://twitter.com/cybercronai/status/1898169442527334732 · Twitter Post
• https://twitter.com/CVEnew/status/1897912307671613559 · Twitter Post
• https://twitter.com/cybercronai/status/1897765493953491341 · Twitter Post
• https://usom.gov.tr/bildirim/tr-25-0057 · Note
• https://t.me/cveNotify/165610 · Telegram Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0057 · Note