High severity8.6NVD Advisory· Published May 3, 2024· Updated Jun 17, 2026

CVE-2024-27453

Description

In Extreme XOS through 22.6.1.4, a read-only user can escalate privileges to root via a crafted HTTP POST request to the python method of the Machine-to-Machine Interface (MMI).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Extreme/XOSdescription
Extremenetworks/XOSllm-fuzzy
Range: <=22.6.1.4
Extremenetworks/Extremexos
cpe:2.3:o:extremenetworks:extremexos:*:*:*:*:*:*:*:*
Range: <22.7

Patches

Vulnerability mechanics

References

www.exsiliumsecurity.com/CVE-2024-27453.htmlnvdExploitThird Party Advisory
extreme-networks.my.site.com/ExtrArticleDetailnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.559
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000