CVE-2019-16889

🗓️ 25 Sep 2019 19:51:38Reported by mitreType

Ubiquiti EdgeMAX devices before 2.0.3 allows remote attackers to cause denial of service due to *.cache file creation when a valid length payload is provided to the beaker.session.id cookie

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2019-16889	25 Sep 201919:51	–	cvelist
NVD	CVE-2019-16889	25 Sep 201920:15	–	nvd
OpenVAS	Ubiquiti EdgeMAX < 2.0.3 DoS Vulnerability	24 Oct 201900:00	–	openvas
Prion	Code injection	25 Sep 201920:15	–	prion
RedhatCVE	CVE-2019-16889	7 Jan 202609:30	–	redhatcve

NVD

Node

ui er-x_firmwareRange<2.0.3

AND

ui er-xMatch-

Node

ui er-x-sfp_firmwareRange<2.0.3

AND

ui er-x-sfpMatch-

Node

ui ep-r6_firmwareRange<2.0.3

AND

ui ep-r6Match-

Node

ui erlite-3_firmwareRange<2.0.3

AND

ui erlite-3Match-

Node

ui erpoe-5_firmwareRange<2.0.3

AND

ui erpoe-5Match-

Node

ui er-8_firmwareRange<2.0.3

AND

ui er-8Match-

Node

ui erpro-8_firmwareRange<2.0.3

AND

ui erpro-8Match-

Node

ui ep-r8_firmwareRange<2.0.3

AND

ui ep-r8Match-

Node

ui er-4_firmwareRange<2.0.3

AND

ui er-4Match-

Node

ui er-6p_firmwareRange<2.0.3

AND

ui er-6pMatch-

Node

ui er-12_firmwareRange<2.0.3

AND

ui er-12Match-

Node

ui er-8-xg_firmwareRange<2.0.3

AND

ui er-8-xgMatch-

Source	Link
mjlanders	www.mjlanders.com/2019/07/28/resource-consumption-dos-on-edgemax-v1-10-6/
hackerone	www.hackerone.com/reports/406614
community	www.community.ui.com/releases/New-EdgeRouter-firmware-2-0-3-has-been-released-2-0-3/e8badd28-a112-4269-9fb6-ffe3fc0e1643

21 Nov 2024 04:31Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5

CVSS 27.8

EPSS0.11494

CWE-770