Lucene search
HistoryDec 05, 2022 - 10:15 p.m.
CVE-2022-43553
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
55.8%
A remote code execution vulnerability in EdgeRouters (Version 2.0.9-hotfix.4 and earlier) allows a malicious actor with an operator account to run arbitrary administrator commands.This vulnerability is fixed in Version 2.0.9-hotfix.5 and later.
Affected configurations
Node
uiedgemax_edgerouter_firmwareRange<2.0.9
ORuiedgemax_edgerouter_firmwareMatch2.0.9-
ORuiedgemax_edgerouter_firmwareMatch2.0.9hotfix1
ORuiedgemax_edgerouter_firmwareMatch2.0.9hotfix2
ORuiedgemax_edgerouter_firmwareMatch2.0.9hotfix4
uiedgemax_edgerouterMatch-
Related
prion
prion
Remote code execution
2022-12-05 22:15:00
cve
cve
CVE-2022-43553
2022-12-05 22:15:11
cvelist
cvelist
CVE-2022-43553
2022-12-05 00:00:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
55.8%
Related for NVD:CVE-2022-43553