CVE-2022-43553: UI Edgemax Edgerouter Firmware

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

A remote code execution vulnerability in EdgeRouters (Version 2.0.9-hotfix.4 and earlier) allows a malicious actor with an operator account to run arbitrary administrator commands.This vulnerability is fixed in Version 2.0.9-hotfix.5 and later.

Affected products

• UI Edgemax Edgerouter Firmware: before 2.0.9 (fixed in 2.0.9); version 2.0.9 only

Published 2022-12-05. Last modified 2026-06-17.