PatchTheCVEedgeswitch firmware vulnerabilities and fixes
Recent CVEs affecting edgeswitch firmware, with upgrade or downgrade steps. 6 tracked.
Also searched as: edgeswitchfirmware.
edgeswitch firmware has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2020-08-17. Highest priority: CVE-2020-8233 (score 54/100).
- CVE-2020-8233 HIGH 8.8 UPGRADE DOWNGRADE A command injection vulnerability exists in EdgeSwitch firmware <v1.9.0 that allowed an authenticated read-onl
- CVE-2020-8232 MEDIUM 6.5 UPGRADE An information disclosure vulnerability exists in EdgeMax EdgeSwitch firmware v1.9.0 that allowed read only us
- CVE-2019-5446 HIGH 7.2 UPGRADE Command Injection in EdgeMAX EdgeSwitch prior to 1.8.2 allow an Admin user to execute commands as root.
- CVE-2019-5445 MEDIUM 4.9 UPGRADE DoS in EdgeMAX EdgeSwitch prior to 1.8.2 allow an Admin user to Crash the SSH CLI interface by using crafted c
- CVE-2018-12591 HIGH 7.2 UPGRADE Ubiquiti Networks EdgeSwitch version 1.7.3 and prior suffer from an improperly neutralized element in an OS co
- CVE-2018-12590 HIGH 7.2 UPGRADE Ubiquiti Networks EdgeSwitch version 1.7.3 and prior suffer from an externally controlled format-string vulner
FAQ
How do I fix edgeswitch firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is edgeswitch firmware being exploited right now?
None of the tracked edgeswitch firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which edgeswitch firmware CVE should I patch first?
CVE-2020-8233 currently ranks highest (54/100): A command injection vulnerability exists in EdgeSwitch firmware <v1.9.0 that allowed an authenticated read-onl.