Cross-Site Request Forgery Vulnerability in Ubiquiti Networks EdgeOS

CVE-2017-0933

What is CVE-2017-0933?

Ubiquiti Networks EdgeOS versions up to and including 1.9.1 are susceptible to a Cross-Site Request Forgery vulnerability. This security flaw could allow an attacker with a read-only operator account to craft a malicious page that, when accessed by an administrative user, could lead to unauthorized escalation of privileges. The attacker could gain access to admin-level capabilities, compromising the integrity and security of the affected systems.

References