writeups.xyz / Multiple Vulnerabilities In Extreme Networks ExtremeXOS

Submitter : c2a

Date: 5 December 2023

Bounty : undisclosed

Vulnerabilities :

• Arbitrary File Read
• Arbitrary File Write
• SSRF
• RCE
• Privilege Escalation
• Local Privilege Escalation
• CSRF
• Security Code Review

Programs :

• Extreme Networks

Authors :

• David Yesland (@Daveysec)

Link :
https://rhinosecuritylabs.com/research/extreme-networks-extremexos-vulnerabilities/