CVE-2017-0932: Improper Privilege Management

Ubiquiti Networks EdgeOS version 1.9.1.1 and prior suffer from an Improper Privilege Management vulnerability due to the lack of validation on the input of the Feature functionality. An attacker with access to an operator read-only account and ssh connection to the devices could escalate privileg...

PT-2018-5160

Name of the Vulnerable Software and Affected Versions Ubiquiti Networks EdgeOS versions 1.9.1 and prior Description The issue allows an attacker with access to an operator account to potentially gain admin privileges by luring an admin user into accessing an attacker-controlled page, exploiting a...

PT-2018-5161

Name of the Vulnerable Software and Affected Versions Ubiquiti Networks EdgeOS versions 1.9.1 and prior Description The issue is due to improper privilege management, resulting from a lack of protection of the file system. This allows sensitive information to be exposed. An attacker with access t...

PT-2018-5162

Name of the Vulnerable Software and Affected Versions Ubiquiti Networks EdgeOS versions 1.9.1.1 and prior Description The issue is due to improper privilege management, resulting from a lack of protection of the file system. This leads to the exposure of sensitive information. An attacker with...

CVE-2017-0935: Improper Privilege Management

Ubiquiti Networks EdgeOS version 1.9.1.1 and prior suffer from an Improper Privilege Management vulnerability due to the lack of protection of the file system leading to sensitive information being exposed. An attacker with access to an operator read-only account could escalate privileges to admi...