Remote code execution

2022-12-0522:15:00

PRIOn knowledge base

www.prio-n.com

8.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.8%

JSON

A remote code execution vulnerability in EdgeRouters (Version 2.0.9-hotfix.4 and earlier) allows a malicious actor with an operator account to run arbitrary administrator commands.This vulnerability is fixed in Version 2.0.9-hotfix.5 and later.

CPENameOperatorVersion
edgemax_edgerouter_firmwarelt2.0.9
edgemax_edgerouter_firmwareeq2.0.9 hotfix1
edgemax_edgerouter_firmwareeq2.0.9 hotfix2
edgemax_edgerouter_firmwareeq2.0.9 hotfix4
edgemax_edgerouter_firmwareeq2.0.9

Name	Operator	Version
edgemax_edgerouter_firmware	lt	2.0.9
edgemax_edgerouter_firmware	eq	2.0.9 hotfix1
edgemax_edgerouter_firmware	eq	2.0.9 hotfix2
edgemax_edgerouter_firmware	eq	2.0.9 hotfix4
edgemax_edgerouter_firmware	eq	2.0.9