CVE-2022-43553

2022-12-0500:00:00

CWE-250

hackerone

www.cve.org

9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.8%

JSON

A remote code execution vulnerability in EdgeRouters (Version 2.0.9-hotfix.4 and earlier) allows a malicious actor with an operator account to run arbitrary administrator commands.This vulnerability is fixed in Version 2.0.9-hotfix.5 and later.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "EdgeMAX EdgeRouter",
    "versions": [
      {
        "version": "Fixed Version: 2.0.9-hotfix.5 or later.",
        "status": "affected"
      }
    ]
  }
]