CVE-2023-6522

High

Published: 05/04/2024(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2023-6522 is a vulnerability related to incorrect use of privileged APIs in ExtremePacs Extreme XDS, allowing the collection of user-provided data. This issue affects Extreme XDS versions before 3914.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to user data, posing a significant threat to information security within the organization.

Recommendation

It is recommended to update Extreme XDS to version 3914 or later to mitigate this vulnerability.

Other vulnerabilities in Extreme XDS

CVE-2023-6523High
CVE-2023-6523 is a vulnerability in Extreme XDS that allows authorization bypass through a user-controlled key, leading to authentication abuse.

Original NVD description (English source)

Incorrect Use of Privileged APIs vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users. This issue affects Extreme XDS: before 3914.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS