UI Edgeswitch Firmware vulnerabilities

5 CVEs affecting UI Edgeswitch Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-8233, published 2020-08-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-8233, published 2020-08-17. High severity, CVSS 8.8. EPSS: 4.4% chance of exploitation in the next 30 days. A command injection vulnerability exists in EdgeSwitch firmware <v1.9.0 that allowed an authenticated read-only user to execute arbitrary shell commands over the HTTP interface, allowing them to…
CVE-2019-5446, published 2019-07-10. High severity, CVSS 7.2. EPSS: 2.7% chance of exploitation in the next 30 days. Command Injection in EdgeMAX EdgeSwitch prior to 1.8.2 allow an Admin user to execute commands as root.
CVE-2020-8232, published 2020-08-17. Medium severity, CVSS 6.5. EPSS: 1.7% chance of exploitation in the next 30 days. An information disclosure vulnerability exists in EdgeMax EdgeSwitch firmware v1.9.0 that allowed read only users could obtain unauthorized information through SNMP community pages.
CVE-2018-12590, published 2018-06-20. High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days. Ubiquiti Networks EdgeSwitch version 1.7.3 and prior suffer from an externally controlled format-string vulnerability due to lack of protection on the admin CLI, leading to code execution and…
CVE-2019-5445, published 2019-07-10. Medium severity, CVSS 4.9. EPSS: 1.3% chance of exploitation in the next 30 days. DoS in EdgeMAX EdgeSwitch prior to 1.8.2 allow an Admin user to Crash the SSH CLI interface by using crafted commands.