CVE-2025-11192

A vulnerability in Extreme Networks’ Fabric Engine (VOSS) before 9.3 was discovered. When SD-WAN AutoSense is enabled on a port, it may automatically configure fabric connectivity without validating ISIS authentication settings. The SD-WAN AutoSense implementation may be exploited by malicious actors by allowing unauthorized access to network fabric and configuration data.

Score

CVSS 3.1 8.6 High

Status

Analyzed - 1c053176-eef3-4d6a-ae0b-24728c86587b

Published

2025-10-07

Last modified

2026-10-08

Weaknesses

CWE-287

Affected products

• Fabric Engine Voss (Extreme Networks)
• Fabric Engine (voss) (Extremenetworks)

References

• https://extreme-networks.my.site.com/ExtrArticleDetail?an=000130291