CVE-2017-0933

CVE-2017-0933 affects Ubiquiti Networks EdgeOS 1.9.1 and earlier. The vulnerability is a Cross-Site Request Forgery (CSRF) that can be triggered by an attacker who gains access to an operator (read-only) account and lures an admin (root) user to visit a attacker-controlled page, enabling the atta...

CVE-2017-0934

Affected software: Ubiquiti Networks EdgeOS (EdgeRouter) versions 1.9.1 and prior. Root cause: improper privilege management due to inadequate file-system protections, allowing exposure of sensitive information. Impact: an attacker with operator (read-only) access could escalate to admin/root pri...

CVE-2017-0932

CVE-2017-0932 affects Ubiquiti Networks EdgeOS 1.9.1.1 and earlier (EdgeRouter X among affected devices). The root cause is improper input validation in the Feature functionality, enabling an attacker with an operator (read-only) account and SSH access to escalate to admin/root. Public sources de...