PT-2019-17657
CVE-2019-5424
·
Published
2019-04-10
·
Updated
2020-10-16
Description by
CVSS 2.0
9.0
HighMetricsAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Ubiquiti Networks EdgeSwitch X versions 1.1.0 and prior
Description
A privileged user can execute arbitrary shell commands over the SSH CLI interface, allowing the execution of shell commands under the root user.
Recommendations
For versions 1.1.0 and prior, restrict access to the SSH CLI interface to minimize the risk of exploitation. As a temporary workaround, consider limiting the privileges of users who have access to the SSH CLI interface until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾