CVE-2020-8234

🗓️ 21 Aug 2020 20:37:22Reported by hackeroneType

A vulnerability in The EdgeMax EdgeSwitch firmware <v1.9.1 allows attackers to guess SIDSSL cookie and gain high privileges

Reporter	Title	Published	Views	Family All 9
CNVD	EdgeSwitch Command Injection Vulnerability	24 Aug 202000:00	–	cnvd
Cvelist	CVE-2020-8234	21 Aug 202020:37	–	cvelist
EUVD	EUVD-2020-29106	7 Oct 202500:30	–	euvd
Hacker One	Ubiquiti Inc.: Web Server Predictable Session ID on EdgeSwitch	14 Jan 202008:23	–	hackerone
NVD	CVE-2020-8234	21 Aug 202021:15	–	nvd
OSV	CVE-2020-8234	21 Aug 202021:15	–	osv
Prion	Command injection	21 Aug 202021:15	–	prion
Positive Technologies	PT-2020-20045 · Ubiquiti · Edgemax Edgeswitch	21 Aug 202000:00	–	ptsecurity
RedhatCVE	CVE-2020-8234	22 May 202517:12	–	redhatcve

NVD

Vulners

Node

ui edgemax_firmwareRange<1.9.1

AND

ui ep-s16Match-

ui es-12fMatch-

ui es-16-150wMatch-

ui es-16-xgMatch-

ui es-24-250wMatch-

ui es-24-500wMatch-

ui es-24-liteMatch-

ui es-48-500wMatch-

ui es-48-750wMatch-

ui es-48-liteMatch-

ui es-8-150wMatch-

[
  {
    "product": "EdgeSwitch firmware v1.9.0 and prior",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed in EdgeMarx Edge Switch firmware v1.9.1"
      }
    ]
  }
]

Source	Link
community	www.community.ui.com/releases/Security-advisory-bulletin-014-014/1c32c056-2c64-4e60-ac23-ce7d8f387821%2C
community	www.community.ui.com/releases/EdgeMAX-EdgeSwitch-Firmware-v1-9-1-v1-9-1/8a87dfc5-70f5-4055-8d67-570db1f5695c%2C
ui	www.ui.com/download/edgemax

21 Nov 2024 05:38Current

9.5High risk

Vulners AI Score9.5

CVSS 3.19.8

CVSS 210

EPSS0.02316

CWE-613