A path traversal and link-following vulnerability in Extreme Switch Engine (EXOS) allows authenticated users to access or manipulate files outside of authorized directory boundaries.

The vulnerability (CWE-59) exists in the mv, cp, and rm utilities, which fail to safely canonicalize paths or handle symbolic links. This permits an authenticated attacker to perform file operations in restricted areas of the filesystem.

By manipulating file operations, an attacker could potentially overwrite critical system files or exfiltrate sensitive configuration data. The CVSS score of 8.7 highlights the severity of this risk, as it impacts the integrity and confidentiality of the switch operating system. This could lead to a complete loss of control over the affected network device.

Immediate Action: Upgrade to EXOS versions 31.7.4, 32.7.4.15, 33.1.100, 33.7.1, or later to fix the file utility path validation.

Proactive Monitoring: Review system logs for unusual file operations or attempts to access system directories via the shell environment.

Compensating Controls: Strictly limit shell access to authorized personnel and ensure that the principle of least privilege is applied to all user accounts on the device.

Public Exploit Available: No

Administrators should treat this vulnerability with high urgency by deploying the patched firmware versions. Ensuring the security of the underlying filesystem is essential for maintaining the integrity of the network infrastructure.