CVE-2025-27211

An Improper Input Validation in EdgeMAX EdgeSwitch Version 1.10.4 and earlier could allow a Command Injection by a malicious actor with access to EdgeSwitch adjacent network...

CVE-2025-27211

CVE-2025-27211 affects EdgeMAX EdgeSwitch (versions 1.10.4 and earlier). The root cause is improper input validation in EdgeSwitch that enables command injection. Exploitation is possible from an adjacent network with no privileges and no user interaction required; impacts stated as high for conf...

PT-2025-31871 · Edgemax · Edgeswitch

Name of the Vulnerable Software and Affected Versions: EdgeMAX EdgeSwitch versions 1.10.4 and earlier Description: An improper input validation in EdgeMAX EdgeSwitch can allow a malicious actor with access to the EdgeSwitch adjacent network to execute commands through command injection...

CVE-2020-8126

A privilege escalation in the EdgeSwitch prior to version 1.7.1, an CGI script don't fully sanitize the user input resulting in local commands execution, allowing an operator user Privilege-1 to escalate privileges and became administrator Privilege-15...

CVE-2020-8234

A vulnerability exists in The EdgeMax EdgeSwitch firmware...

CVE-2020-8233

A command injection vulnerability exists in EdgeSwitch firmware...

CVE-2020-8232

An information disclosure vulnerability exists in EdgeMax EdgeSwitch firmware v1.9.0 that allowed read only users could obtain unauthorized information through SNMP community pages...

CVE-2019-5446

Command Injection in EdgeMAX EdgeSwitch prior to 1.8.2 allow an Admin user to execute commands as root...

CVE-2019-5445

DoS in EdgeMAX EdgeSwitch prior to 1.8.2 allow an Admin user to Crash the SSH CLI interface by using crafted commands...

SUSE CVE-2020-8233

A command injection vulnerability exists in EdgeSwitch firmware v1.9.0 that allowed an authenticated read-only user to execute arbitrary shell commands over the HTTP interface, allowing them to escalate privileges...

EdgeSwitch Command Injection Vulnerability

EdgeSwitch is a poe Gigabit switch from Ubiquiti Networks Ubiquiti Express and is part of the EdgeMAX series. A command injection vulnerability exists in EdgeSwitch versions prior to 1.9.1. The vulnerability stems from a guessable SIDSSL cookie in the administrator web interface of an older versi...

CVE-2020-8234

A vulnerability exists in The EdgeMax EdgeSwitch firmware v1.9.1 where the EdgeSwitch legacy web interface SIDSSL cookie for admin can be guessed, enabling the attacker to obtain high privileges and get a root shell by a Command injection...

Command injection

A vulnerability exists in The EdgeMax EdgeSwitch firmware v1.9.1 where the EdgeSwitch legacy web interface SIDSSL cookie for admin can be guessed, enabling the attacker to obtain high privileges and get a root shell by a Command injection...

CVE-2020-8234

The CVE-2020-8234 entry concerns EdgeMax EdgeSwitch firmware

CVE-2020-8234

A vulnerability exists in The EdgeMax EdgeSwitch firmware v1.9.1 where the EdgeSwitch legacy web interface SIDSSL cookie for admin can be guessed, enabling the attacker to obtain high privileges and get a root shell by a Command injection...

PT-2020-20045 · Ubiquiti · Edgemax Edgeswitch

Name of the Vulnerable Software and Affected Versions: EdgeMax EdgeSwitch firmware versions prior to 1.9.1 Description: A vulnerability exists where the EdgeSwitch legacy web interface SIDSSL cookie for admin can be guessed, enabling the attacker to obtain high privileges and get a root shell by ...

Ubiquiti Networks EdgeSwitch Operating System Command Injection Vulnerability

The Ubiquiti Networks EdgeSwitch is a Gigabit network switch device from Ubiquiti Networks, Inc. A command injection vulnerability exists in the Ubiquiti Networks EdgeSwitch using firmware version v1.9.0. The vulnerability can be exploited to execute arbitrary shell commands with elevated...

EdgeSwitch Firmware Information Disclosure Vulnerability

Ubiquiti Networks EdgeMAX EdgeSwitch is a PoE+ Gigabit switch from Ubiquiti Networks, Inc. An information disclosure vulnerability exists in the Ubiquiti Networks EdgeMax EdgeSwitch using firmware version v1.9.0. The vulnerability can be exploited by an attacker to obtain unauthorized information...

CVE-2020-8232

An information disclosure vulnerability exists in EdgeMax EdgeSwitch firmware v1.9.0 that allowed read only users could obtain unauthorized information through SNMP community pages...

CVE-2020-8233

A command injection vulnerability exists in EdgeSwitch firmware v1.9.0 that allowed an authenticated read-only user to execute arbitrary shell commands over the HTTP interface, allowing them to escalate privileges...