CVE-2019-5426: Improper Authentication

In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an unauthenticated user can use the "local port forwarding" and "dynamic port forwarding" SOCKS proxy functionalities. Remote attackers without credentials can exploit this bug to access local services or forward traffic through the device if SS...

CVE-2019-5425: Improper Neutralization of Special Elements used in an OS Command

In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an authenticated user can execute arbitrary shell commands over the SSH interface bypassing the CLI interface, which allow them to escalate privileges to root...

CVE-2019-5424: Improper Neutralization of Special Elements used in a Command

In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, a privileged user can execute arbitrary shell commands over the SSH CLI interface. This allows to execute shell commands under the root user...

CVE-2018-12591

Ubiquiti Networks EdgeSwitch version 1.7.3 and prior suffer from an improperly neutralized element in an OS command due to lack of protection on the admin CLI, leading to code execution and privilege escalation greater than administrators themselves are allowed. An attacker with access to an admi...

CVE-2018-12591: Improper Neutralization of Special Elements used in an OS Command

Ubiquiti Networks EdgeSwitch version 1.7.3 and prior suffer from an improperly neutralized element in an OS command due to lack of protection on the admin CLI, leading to code execution and privilege escalation greater than administrators themselves are allowed. An attacker with access to an admi...

CVE-2018-12590: Use of Externally-Controlled Format String

Ubiquiti Networks EdgeSwitch version 1.7.3 and prior suffer from an externally controlled format-string vulnerability due to lack of protection on the admin CLI, leading to code execution and privilege escalation greater than administrators themselves are allowed. An attacker with access to an...

PT-2018-11277

Name of the Vulnerable Software and Affected Versions Ubiquiti Networks EdgeSwitch versions 1.7.3 and prior Description The issue arises from an improperly neutralized element in an OS command due to lack of protection on the admin CLI, leading to code execution and privilege escalation. An...

PT-2018-11276

Name of the Vulnerable Software and Affected Versions Ubiquiti Networks EdgeSwitch versions 1.7.3 and prior Description The issue is an externally controlled format-string vulnerability due to lack of protection on the admin CLI. This vulnerability can lead to code execution and privilege...