CVE-2019-5445

CVE-2019-5445 affects Ubiquiti EdgeMAX EdgeSwitch prior to firmware version 1.8.2. The vulnerability allows an administrator to cause a denial-of-service by sending crafted commands that crash the SSH CLI interface. Documents consistently describe this as a DoS affecting the SSH CLI, with the imp...

CVE-2019-5445

DoS in EdgeMAX EdgeSwitch prior to 1.8.2 allow an Admin user to Crash the SSH CLI interface by using crafted commands...

CVE-2019-5446: Improper Neutralization of Special Elements used in a Command

Command Injection in EdgeMAX EdgeSwitch prior to 1.8.2 allow an Admin user to execute commands as root...

PT-2019-17674 · Edgemax · Edgeswitch

Name of the Vulnerable Software and Affected Versions: EdgeMAX EdgeSwitch versions prior to 1.8.2 Description: A denial of service issue exists, allowing an Admin user to crash the SSH CLI interface by using crafted commands. Recommendations: For versions prior to 1.8.2, update to version 1.8.2 o...

CVE-2019-5445: Uncontrolled Resource Consumption

DoS in EdgeMAX EdgeSwitch prior to 1.8.2 allow an Admin user to Crash the SSH CLI interface by using crafted commands...

CVE-2019-5426

In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an unauthenticated user can use the "local port forwarding" and "dynamic port forwarding" SOCKS proxy functionalities. Remote attackers without credentials can exploit this bug to access local services or forward traffic through the device if SS...

Code injection

In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an unauthenticated user can use the "local port forwarding" and "dynamic port forwarding" SOCKS proxy functionalities. Remote attackers without credentials can exploit this bug to access local services or forward traffic through the device if SS...

CVE-2019-5425

In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an authenticated user can execute arbitrary shell commands over the SSH interface bypassing the CLI interface, which allow them to escalate privileges to root...

Design/Logic Flaw

In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, a privileged user can execute arbitrary shell commands over the SSH CLI interface. This allows to execute shell commands under the root user...

Design/Logic Flaw

In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an authenticated user can execute arbitrary shell commands over the SSH interface bypassing the CLI interface, which allow them to escalate privileges to root...

CVE-2019-5425

In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an authenticated user can execute arbitrary shell commands over the SSH interface bypassing the CLI interface, which allow them to escalate privileges to root...

CVE-2019-5424

In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, a privileged user can execute arbitrary shell commands over the SSH CLI interface. This allows to execute shell commands under the root user...

CVE-2019-5426

CVE-2019-5426 affects Ubiquiti Networks EdgeSwitch X (v1.1.0 and prior). The vulnerability allows an unauthenticated remote user to use local port forwarding and dynamic port forwarding (SOCKS proxy) functionality to access local services or forward traffic through the device if SSH is enabled. T...

CVE-2019-5426

In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an unauthenticated user can use the "local port forwarding" and "dynamic port forwarding" SOCKS proxy functionalities. Remote attackers without credentials can exploit this bug to access local services or forward traffic through the device if SS...

CVE-2019-5425

Affected product: Ubiquiti Networks EdgeSwitch X (v1.1.0 and earlier). Issue: authenticated SSH access can run arbitrary shell commands, bypassing the CLI, enabling root privilege escalation. Root cause: improper command handling over SSH interfaces allows execution of non-CLI commands. Impact: f...

CVE-2019-5424

In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, a privileged user can execute arbitrary shell commands over the SSH CLI interface. This allows to execute shell commands under the root user...

CVE-2019-5424

CVE-2019-5424 affects Ubiquiti Networks EdgeSwitch X (v1.1.0 and earlier). A privileged user can execute arbitrary shell commands via the SSH CLI, enabling root-level commands. This is the stated impact in the CVE descriptions and multiple connected records. A patch/release note referenced in the...

CVE-2019-5425: Improper Neutralization of Special Elements used in an OS Command

In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an authenticated user can execute arbitrary shell commands over the SSH interface bypassing the CLI interface, which allow them to escalate privileges to root...

PT-2019-17659

Name of the Vulnerable Software and Affected Versions Ubiquiti Networks EdgeSwitch X versions 1.1.0 and prior Description The issue allows an unauthenticated user to utilize the local port forwarding and dynamic port forwarding functionalities, which can be exploited by remote attackers without...

CVE-2019-5424: Improper Neutralization of Special Elements used in a Command

In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, a privileged user can execute arbitrary shell commands over the SSH CLI interface. This allows to execute shell commands under the root user...