Improper Privilege Management in Ubiquiti Networks EdgeOS
CVE-2017-0932

8.8HIGH

Key Information:

Vendor

Ubiquiti Networks

Status
Edgerouter X
Vendor
CVE Published:
22 March 2018

What is CVE-2017-0932?

Ubiquiti Networks EdgeOS has a vulnerability that allows an attacker with operator privileges and SSH access to gain unauthorized administrative rights. This issue stems from insufficient validation in the Feature functionality, which could lead to significant security risks. Users are encouraged to apply the latest updates to mitigate these risks and secure their devices from potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

EdgeRouter X EdgeOS v1.9.1.1 and prior

References

https://hackerone.com/reports/239719
x_refsource_MISC
https://community.ubnt.com/t5/EdgeMAX-Updates-Blog/EdgeMA...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.