Ubiquiti EdgeRouter - Login Panel Detection

Ubiquiti EdgeRouter is an enterprise-grade router with advanced routing capabilities and VPN features, running EdgeOS Ubiquiti's Vyatta-based firmware. !/usr/bin/env python3 -- coding: utf-8 -- """Ubiquiti EdgeRouter is an enterprise-grade router with advanced routing capabilities and VPN feature...

EdgeOS Login Panel - Detect

EdgeOS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """EdgeOS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'EdgeOS Login Panel - Detect', 'description': 'EdgeOS logi...

EUVD-2017-1271

Malware in sbrugna...

EUVD-2017-1272

Malware in sbrugna...

EUVD-2018-17047

Malware in sbrugna...

EUVD-2017-1274

Malware in sbrugna...

EUVD-2017-1273

Malware in sbrugna...

CVE-2018-5265

Ubiquiti EdgeOS 1.9.1 on EdgeRouter Lite devices allows remote attackers to execute arbitrary code with admin credentials, because /opt/vyatta/share/vyatta-cfg/templates/system/static-host-mapping/host-name/node.def does not sanitize the 'alias' or 'ips' parameter for shell metacharacters...

Ubiquiti Networks EdgeRouter Trust Management Vulnerability

Ubiquiti Networks EdgeRouter is a router from Ubiquiti Networks, Inc. A trust management issue vulnerability exists in Ubiquiti Networks EdgeOS on EdgeRouter X that could allow a remote attacker to execute arbitrary code on an affected installation...

Ubiquiti Networks EdgeOS Improper Certificate Validation Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ubiquiti Networks EdgeOS on EdgeRouter X, EdgeRouter Pro X SFP, EdgeRouter 10X and EdgePoint 6-port routers. User interaction is required to exploit this vulnerability in that an administrator must...

Code injection

Ubiquiti EdgeOS 1.9.1 on EdgeRouter Lite devices allows remote attackers to execute arbitrary code with admin credentials, because /opt/vyatta/share/vyatta-cfg/templates/system/static-host-mapping/host-name/node.def does not sanitize the 'alias' or 'ips' parameter for shell metacharacters...

CVE-2018-5265

Ubiquiti EdgeOS 1.9.1 on EdgeRouter Lite devices allows remote attackers to execute arbitrary code with admin credentials, because /opt/vyatta/share/vyatta-cfg/templates/system/static-host-mapping/host-name/node.def does not sanitize the 'alias' or 'ips' parameter for shell metacharacters...

CVE-2018-5265

Ubiquiti EdgeOS 1.9.1 on EdgeRouter Lite devices allows remote attackers to execute arbitrary code with admin credentials, because /opt/vyatta/share/vyatta-cfg/templates/system/static-host-mapping/host-name/node.def does not sanitize the 'alias' or 'ips' parameter for shell metacharacters...

CVE-2018-5265

Ubiquiti EdgeOS 1.9.1 on EdgeRouter Lite devices is affected by CVE-2018-5265. The root cause is unsanitized shell metacharacters in the alias/ips fields of /opt/vyatta/share/vyatta-cfg/templates/system/static-host-mapping/host-name/node.def, enabling remote code execution with admin credentials....

CVE-2018-5265

Ubiquiti EdgeOS 1.9.1 on EdgeRouter Lite devices allows remote attackers to execute arbitrary code with admin credentials, because /opt/vyatta/share/vyatta-cfg/templates/system/static-host-mapping/host-name/node.def does not sanitize the 'alias' or 'ips' parameter for shell metacharacters...

CVE-2018-5265: Improper Neutralization of Special Elements used in an OS Command

Ubiquiti EdgeOS 1.9.1 on EdgeRouter Lite devices allows remote attackers to execute arbitrary code with admin credentials, because /opt/vyatta/share/vyatta-cfg/templates/system/static-host-mapping/host-name/node.def does not sanitize the 'alias' or 'ips' parameter for shell metacharacters...

PT-2019-10961

Name of the Vulnerable Software and Affected Versions: Ubiquiti EdgeOS version 1.9.1 Description: The issue allows remote attackers to execute arbitrary code with admin credentials because the /opt/vyatta/share/vyatta-cfg/templates/system/static-host-mapping/host-name/node.def template does not...

Ubiquiti Networks EdgeOS Cross-Site Request Forgery Vulnerability

Ubiquiti Networks EdgeOS is a suite of operating systems from Ubiquiti Networks that run in Ubiquiti products. A cross-site request forgery vulnerability exists in Ubiquiti Networks EdgeOS 1.9.1 and earlier versions. A remote attacker could exploit the vulnerability to gain administrator privileg...

Ubiquiti Networks EdgeOS elevation of privilege vulnerability (CNVD-2018-07431)

Ubiquiti Networks EdgeOS is a suite of operating systems from Ubiquiti Networks that run in Ubiquiti products. A security vulnerability exists in Ubiquiti Networks EdgeOS 1.9.1 and prior versions, which stems from the program's lack of file system protection. An attacker could exploit the...

Ubiquiti Networks EdgeOS elevation of privilege vulnerability (CNVD-2018-07433)

Ubiquiti Networks EdgeOS is a suite of operating systems from Ubiquiti Networks that run in Ubiquiti products. A security vulnerability exists in Ubiquiti Networks EdgeOS 1.9.1.1 and prior versions, which arises from the program's failure to validate inputs to security features. An attacker could...