CVE-2020-8126

2020-02-0714:56:17

hackerone

www.cve.org

EPSS

Percentile

13.1%

JSON

A privilege escalation in the EdgeSwitch prior to version 1.7.1, an CGI script don’t fully sanitize the user input resulting in local commands execution, allowing an operator user (Privilege-1) to escalate privileges and became administrator (Privilege-15).

CNA Affected

[
  {
    "product": "EdgeSwitch",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "1.7.0"
      }
    ]
  }
]

References

hackerone.com/reports/197958

EPSS

Percentile

13.1%

JSON

Related for CVELIST:CVE-2020-8126