PatchTheCVEedgeos vulnerabilities and fixes
Recent CVEs affecting edgeos, with upgrade or downgrade steps. 5 tracked.
edgeos has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2019-06-07. Highest priority: CVE-2018-5265 (score 52/100).
- CVE-2018-5265 HIGH 7.2 MITIGATE Ubiquiti EdgeOS 1.9.1 on EdgeRouter Lite devices allows remote attackers to execute arbitrary code with admin
- CVE-2017-0935 HIGH 8.8 UPGRADE Ubiquiti Networks EdgeOS version 1.9.1.1 and prior suffer from an Improper Privilege Management vulnerability
- CVE-2017-0934 HIGH 8.8 UPGRADE Ubiquiti Networks EdgeOS version 1.9.1 and prior suffer from an Improper Privilege Management vulnerability du
- CVE-2017-0933 HIGH 8.0 UPGRADE Ubiquiti Networks EdgeOS version 1.9.1 and prior suffer from a Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2017-0932 HIGH 8.8 UPGRADE Ubiquiti Networks EdgeOS version 1.9.1.1 and prior suffer from an Improper Privilege Management vulnerability
FAQ
How do I fix edgeos vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is edgeos being exploited right now?
None of the tracked edgeos CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which edgeos CVE should I patch first?
CVE-2018-5265 currently ranks highest (52/100): Ubiquiti EdgeOS 1.9.1 on EdgeRouter Lite devices allows remote attackers to execute arbitrary code with admin .