Rhino Security Labs

Strategic & Technical Blog

Technical Strategic Technical & Strategic Both
Research

Multiple Vulnerabilities In Extreme Networks ExtremeXOS

David Yesland
December 5, 2023

During an external network pentest, we came across a switch administration interface running ExtremeNetworks’ Extreme Operating System (EXOS). This is a network operating system designed to manage ExtremeNetworks’ wide range of…

Read more
Research

CVE-2022-26113: FortiClient Arbitrary File Write As SYSTEM

Research

CVE-2021-41577:
MITM to RCE
in EVGA Precision X1

Technical Strategic Technical & Strategic Both
Categories
Clear Selection
API
Application Security
AWS
Azure
Buyer's Guide
Cloud Security
Compliance
Enterprise Security
GCP
Google Cloud
Internet of Things
Mobile Security
Network Security
News
Penetration Testing
Research
Social Engineering
Tool Development
Uncategorized
Research

CVE-2020-5377: Dell OpenManage Server Administrator File Read

David Yesland

This blog explores a file read vulnerability in Dell OpenManage Server Administrator (OMSA) we found during an internal network penetration test, tracked as CVE-2020-5377 and a bypass for the fix tracked as CVE-2021-21514. 
When this Dell…

Read more