Improper Privilege Management in Ubiquiti Networks EdgeOS

CVE-2017-0934

What is CVE-2017-0934?

Ubiquiti Networks EdgeOS versions 1.9.1 and earlier contain a flaw that allows an attacker with operator-level (read-only) access to exploit insufficient protections within the file system. This exploitation may lead to an escalation of privileges and grant unauthorized administrative (root) access to sensitive system functions, compromising the integrity and security of the device.

References