Improper Privilege Management in Ubiquiti Networks EdgeOS
CVE-2017-0932

8.8HIGH

Key Information:

Vendor
CVE Published:
22 March 2018

What is CVE-2017-0932?

Ubiquiti Networks EdgeOS has a vulnerability that allows an attacker with operator privileges and SSH access to gain unauthorized administrative rights. This issue stems from insufficient validation in the Feature functionality, which could lead to significant security risks. Users are encouraged to apply the latest updates to mitigate these risks and secure their devices from potential exploitation.

Affected Version(s)

EdgeRouter X EdgeOS v1.9.1.1 and prior

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.