A remote code execution vulnerability in EdgeRouters (Version 2.0.9-hotfix.4 and earlier) allows a malicious actor with an operator account to run arbitrary administrator commands.This vulnerability is fixed in Version 2.0.9-hotfix.5 and later.
References
Link | Resource |
---|---|
https://community.ui.com/releases/Security-Advisory-Bulletin-026-026/07697c65-30b3-4c06-a158-35e06534480d | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: hackerone
Published: 2022-12-05T00:00:00
Updated: 2022-12-05T00:00:00
Reserved: 2022-10-20T00:00:00
Link: CVE-2022-43553
JSON object: View
NVD Information
Status : Analyzed
Published: 2022-12-05T22:15:11.037
Modified: 2022-12-08T16:05:56.503
Link: CVE-2022-43553
JSON object: View
Redhat Information
No data.