Lucene search
PRIOn knowledge basePRION:CVE-2020-8233HistoryAug 17, 2020 - 4:15 p.m.
Command injection
2020-08-1716:15:00
PRIOn knowledge base
www.prio-n.com
5
A command injection vulnerability exists in EdgeSwitch firmware <v1.9.0 that allowed an authenticated read-only user to execute arbitrary shell commands over the HTTP interface, allowing them to escalate privileges.
| CPE | Name | Operator | Version |
|---|---|---|---|
| backports_sle | eq | 15.0 sp1 | |
| backports_sle | eq | 15.0 sp2 | |
| leap | eq | 15.1 | |
| leap | eq | 15.2 | |
| edgeswitch_firmware | lt | 1.9.0 |
References
Related
cvelist
cvelist
CVE-2020-8233
2020-08-17 15:41:19
hackerone
hackerone
Ubiquiti Inc.: Readonly to Root Privilege Escalation on EdgeSwitch
2020-02-14 04:28:06
nvd
nvd
CVE-2020-8233
2020-08-17 16:15:13
cve
cve
CVE-2020-8233
2020-08-17 16:15:13
suse
suse
Security update for nextcloud (moderate)
2020-10-10 00:00:00
openvas
openvas
openSUSE: Security Advisory for nextcloud (openSUSE-SU-2020:1652-1)
2020-10-11 00:00:00
nessus
nessus
openSUSE Security Update : nextcloud (openSUSE-2020-1652)
2020-10-12 00:00:00