Edgemax Edgerouter Firmware vulnerabilities

2 known vulnerabilities in Edgemax Edgerouter Firmware from UI. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  EdgeRouter X: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2023-2373Apr 28, 2023UbiquitiEPSS 7.62%

  A vulnerability was identified in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This vulnerability affects unknown code of the component Web Management Interface. Such manipulation of the argument ecn-up leads to command injection. The attack may be performed fr

• 8.8 High severity

  EdgeMAX EdgeRouter: Execution with Unnecessary Privileges

  CVE-2022-43553Dec 5, 2022EdgeMAX EdgeRouterEPSS 1.16%

  A remote code execution vulnerability in EdgeRouters (Version 2.0.9-hotfix.4 and earlier) allows a malicious actor with an operator account to run arbitrary administrator commands.This vulnerability is fixed in Version 2.0.9-hotfix.5 and later.