VULNERABILITY INTELLIGENCE

CVE-2025-11192

CVSS score8.6 HIGH
EPSS probability0.34%
CISA KEVNot currently listed
Published2025-10-07
Last modified2026-10-08
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Description

A vulnerability in Extreme Networks’ Fabric Engine (VOSS) before 9.3 was discovered. When SD-WAN AutoSense is enabled on a port, it may automatically configure fabric connectivity without validating ISIS authentication settings. The SD-WAN AutoSense implementation may be exploited by malicious actors by allowing unauthorized access to network fabric and configuration data.

Weakness classification

  • 1c053176-eef3-4d6a-ae0b-24728c86587b: CWE-287
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references