UI Edgeswitch X vulnerabilities

3 CVEs affecting UI Edgeswitch X, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-5426, published 2019-04-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-5425, published 2019-04-10. High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days. In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an authenticated user can execute arbitrary shell commands over the SSH interface bypassing the CLI interface, which allow them to escalate…
CVE-2019-5424, published 2019-04-10. High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days. In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, a privileged user can execute arbitrary shell commands over the SSH CLI interface. This allows to execute shell commands under the root user.
CVE-2019-5426, published 2019-04-10. Medium severity, CVSS 4.8. EPSS: 0.8% chance of exploitation in the next 30 days. In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an unauthenticated user can use the "local port forwarding" and "dynamic port forwarding" (SOCKS proxy) functionalities. Remote attackers without…