← CVE Intelligence

CVE-2025-11192

Fabric Engine (VOSS) AutoSense Authentication Bypass PUBLISHED

Description (CNA)

A vulnerability in Extreme Networks’ Fabric Engine (VOSS) before 9.3 was discovered. When SD-WAN AutoSense is enabled on a port, it may automatically configure fabric connectivity without validating ISIS authentication settings. The SD-WAN AutoSense implementation may be exploited by malicious actors by allowing unauthorized access to network fabric and configuration data.

Affected (CNA)

Vendor / productVersions
Extreme Networks / Fabric Engine (VOSS)affected 9.2 through <9.2

CWE

CWE-287

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.