123 matches found
CVE-2020-8234
A vulnerability exists in The EdgeMax EdgeSwitch firmware v1.9.1 where the EdgeSwitch legacy web interface SIDSSL cookie for admin can be guessed, enabling the attacker to obtain high privileges and get a root shell by a Command injection...
Command injection
A vulnerability exists in The EdgeMax EdgeSwitch firmware v1.9.1 where the EdgeSwitch legacy web interface SIDSSL cookie for admin can be guessed, enabling the attacker to obtain high privileges and get a root shell by a Command injection...
CVE-2020-8234
A vulnerability exists in The EdgeMax EdgeSwitch firmware v1.9.1 where the EdgeSwitch legacy web interface SIDSSL cookie for admin can be guessed, enabling the attacker to obtain high privileges and get a root shell by a Command injection...
CVE-2020-8234
The CVE-2020-8234 entry concerns EdgeMax EdgeSwitch firmware
CVE-2020-8234: Insufficient Session Expiration
A vulnerability exists in The EdgeMax EdgeSwitch firmware...
PT-2020-20045 · Ubiquiti · Edgemax Edgeswitch
Name of the Vulnerable Software and Affected Versions: EdgeMax EdgeSwitch firmware versions prior to 1.9.1 Description: A vulnerability exists where the EdgeSwitch legacy web interface SIDSSL cookie for admin can be guessed, enabling the attacker to obtain high privileges and get a root shell by ...
Ubiquiti Networks EdgeSwitch Operating System Command Injection Vulnerability
The Ubiquiti Networks EdgeSwitch is a Gigabit network switch device from Ubiquiti Networks, Inc. A command injection vulnerability exists in the Ubiquiti Networks EdgeSwitch using firmware version v1.9.0. The vulnerability can be exploited to execute arbitrary shell commands with elevated...
EdgeSwitch Firmware Information Disclosure Vulnerability
Ubiquiti Networks EdgeMAX EdgeSwitch is a PoE+ Gigabit switch from Ubiquiti Networks, Inc. An information disclosure vulnerability exists in the Ubiquiti Networks EdgeMax EdgeSwitch using firmware version v1.9.0. The vulnerability can be exploited by an attacker to obtain unauthorized information...
CVE-2020-8232
An information disclosure vulnerability exists in EdgeMax EdgeSwitch firmware v1.9.0 that allowed read only users could obtain unauthorized information through SNMP community pages...
CVE-2020-8232
An information disclosure vulnerability exists in EdgeMax EdgeSwitch firmware v1.9.0 that allowed read only users could obtain unauthorized information through SNMP community pages...
CVE-2020-8233
A command injection vulnerability exists in EdgeSwitch firmware v1.9.0 that allowed an authenticated read-only user to execute arbitrary shell commands over the HTTP interface, allowing them to escalate privileges...
Information disclosure
An information disclosure vulnerability exists in EdgeMax EdgeSwitch firmware v1.9.0 that allowed read only users could obtain unauthorized information through SNMP community pages...
CVE-2020-8233
A command injection vulnerability exists in EdgeSwitch firmware...
Command injection
A command injection vulnerability exists in EdgeSwitch firmware v1.9.0 that allowed an authenticated read-only user to execute arbitrary shell commands over the HTTP interface, allowing them to escalate privileges...
EUVD-2020-29105
A command injection vulnerability exists in EdgeSwitch firmware v1.9.0 that allowed an authenticated read-only user to execute arbitrary shell commands over the HTTP interface, allowing them to escalate privileges...
CVE-2020-8233
A command injection vulnerability exists in EdgeSwitch firmware v1.9.0 that allowed an authenticated read-only user to execute arbitrary shell commands over the HTTP interface, allowing them to escalate privileges...
CVE-2020-8233
CVE-2020-8233 is a command-injection vulnerability in Ubiquiti EdgeSwitch firmware prior to v1.9.0. An authenticated read-only user could execute arbitrary shell commands via the HTTP interface, enabling privilege escalation. The vulnerability affects EdgeSwitch firmware
CVE-2020-8232
CVE-2020-8232 affects Ubiquiti EdgeMax EdgeSwitch firmware v1.9.0 (EdgeSwitch ESWH/ESGH). An information disclosure vulnerability allows read-only SNMP users to obtain unauthorized information via SNMP community pages. Exploitation details are not described in the primary documents, but multiple ...