Security Advisory

CVE-2025-59090

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-01-26 10:03:21

Last updated 2026-01-26 15:38:17

Assigner SEC-VLab

CVSS score 9.3

State PUBLISHED

Description

On the exos 9300 server, a SOAP API is reachable on port 8002. This API does not require any authentication prior to sending requests. Therefore, network access to the exos server allows e.g. the creation of arbitrary access log events as well as querying the 2FA PINs associated with the enrolled chip cards.

← Browse all CVEs View on cve.org ↗