Software Engineering Institute

Extreme Network switches running ExtremeWare XOS contain a vulnerability that permits arbitrary command execution as the super user of the underlying operating system by any authenticated XOS user, including those created as non-privileged XOS users.

In order to exploit this vulnerability, the user must be authenticated to XOS.

Any authenticated XOS user can potentially execute arbitrary commands with administrator-level access to the underlying operating system of the switches.

Apply a patch available from the Vendor. For more information see the vendor field notice FN0215:

http://www.extremenetworks.com/services/documentation/FieldNotices_FN0215-Security_Alert_EXOS.asp

Workaround

Until and after the patch can be applied, consider restricting account access to only those users who are authorized to make configuration changes. It is also advisable to consider the use of firewalls/port blocking to restrict network authentication access to as few hosts as practical. Note that this will not completely mitigate this vulnerability, but will limit the vectors for attack.