EUVD-2019-15017

Malware in sbrugna...

EUVD-2019-15018

Malware in sbrugna...

EUVD-2019-15019

Malware in sbrugna...

Code injection

In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an unauthenticated user can use the "local port forwarding" and "dynamic port forwarding" SOCKS proxy functionalities. Remote attackers without credentials can exploit this bug to access local services or forward traffic through the device if SS...

Design/Logic Flaw

In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, a privileged user can execute arbitrary shell commands over the SSH CLI interface. This allows to execute shell commands under the root user...

CVE-2019-5425

In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an authenticated user can execute arbitrary shell commands over the SSH interface bypassing the CLI interface, which allow them to escalate privileges to root...

CVE-2019-5425

In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an authenticated user can execute arbitrary shell commands over the SSH interface bypassing the CLI interface, which allow them to escalate privileges to root...

Design/Logic Flaw

In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an authenticated user can execute arbitrary shell commands over the SSH interface bypassing the CLI interface, which allow them to escalate privileges to root...

CVE-2019-5424

In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, a privileged user can execute arbitrary shell commands over the SSH CLI interface. This allows to execute shell commands under the root user...

CVE-2019-5426

CVE-2019-5426 affects Ubiquiti Networks EdgeSwitch X (v1.1.0 and prior). The vulnerability allows an unauthenticated remote user to use local port forwarding and dynamic port forwarding (SOCKS proxy) functionality to access local services or forward traffic through the device if SSH is enabled. T...

CVE-2019-5426

In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an unauthenticated user can use the "local port forwarding" and "dynamic port forwarding" SOCKS proxy functionalities. Remote attackers without credentials can exploit this bug to access local services or forward traffic through the device if SS...

CVE-2019-5425

Affected product: Ubiquiti Networks EdgeSwitch X (v1.1.0 and earlier). Issue: authenticated SSH access can run arbitrary shell commands, bypassing the CLI, enabling root privilege escalation. Root cause: improper command handling over SSH interfaces allows execution of non-CLI commands. Impact: f...

CVE-2019-5424

CVE-2019-5424 affects Ubiquiti Networks EdgeSwitch X (v1.1.0 and earlier). A privileged user can execute arbitrary shell commands via the SSH CLI, enabling root-level commands. This is the stated impact in the CVE descriptions and multiple connected records. A patch/release note referenced in the...

CVE-2019-5424

In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, a privileged user can execute arbitrary shell commands over the SSH CLI interface. This allows to execute shell commands under the root user...

CVE-2019-5425: Improper Neutralization of Special Elements used in an OS Command

In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an authenticated user can execute arbitrary shell commands over the SSH interface bypassing the CLI interface, which allow them to escalate privileges to root...

PT-2019-17659

Name of the Vulnerable Software and Affected Versions Ubiquiti Networks EdgeSwitch X versions 1.1.0 and prior Description The issue allows an unauthenticated user to utilize the local port forwarding and dynamic port forwarding functionalities, which can be exploited by remote attackers without...

PT-2019-17658

Name of the Vulnerable Software and Affected Versions Ubiquiti Networks EdgeSwitch X versions prior to 1.1.0 Description The issue allows an authenticated user to execute arbitrary shell commands over the SSH interface, bypassing the CLI interface, which enables them to escalate privileges to roo...

CVE-2019-5424: Improper Neutralization of Special Elements used in a Command

In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, a privileged user can execute arbitrary shell commands over the SSH CLI interface. This allows to execute shell commands under the root user...

PT-2019-17657

Name of the Vulnerable Software and Affected Versions Ubiquiti Networks EdgeSwitch X versions 1.1.0 and prior Description A privileged user can execute arbitrary shell commands over the SSH CLI interface, allowing the execution of shell commands under the root user. Recommendations For versions...

CVE-2019-5426: Improper Authentication

In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an unauthenticated user can use the "local port forwarding" and "dynamic port forwarding" SOCKS proxy functionalities. Remote attackers without credentials can exploit this bug to access local services or forward traffic through the device if SS...