SA-2025-023 - HiveOS User Level Password Decryption (CVE-2025-27228)

[SamPirok]

Summary

An issue was discovered in Extreme Networks IQ Engine (HiveOS) before 10.7r5. An authenticated user may be able to decrypt user-level passwords via CLI functionality.

Products Potentially Affected

OS/Product	Exposure
IQ Engine (HiveOS)	Yes

Repair Recommendations

• Fixed in 10.7r5 or later

Please see the full security advisory article here for more details and future updates.