CVE-2021-22909

2021-05-2711:14:32

CWE-300

hackerone

www.cve.org

0.004 Low

EPSS

Percentile

72.2%

JSON

A vulnerability found in EdgeMAX EdgeRouter V2.0.9 and earlier could allow a malicious actor to execute a man-in-the-middle (MitM) attack during a firmware update. This vulnerability is fixed in EdgeMAX EdgeRouter V2.0.9-hotfix.1 and later.

CNA Affected

[
  {
    "product": "EdgeMAX EdgeRouter",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Fixed Version: 2.0.9-hotfix.1 or later."
      }
    ]
  }
]

References

community.ui.com/releases/Security-Advisory-Bulletin-018-018/cfa1566b-4bf8-427b-8cc7-8cffba3a93a4

0.004 Low

EPSS

Percentile

72.2%

JSON

Related for CVELIST:CVE-2021-22909