CVE-2017-0934

HIGH

Ubiquiti Networks EdgeOS <1.9.1 - Privilege Escalation

Title source: llm
STIX 2.1

Description

Ubiquiti Networks EdgeOS version 1.9.1 and prior suffer from an Improper Privilege Management vulnerability due to the lack of protection of the file system leading to sensitive information being exposed. An attacker with access to an operator (read-only) account could escalate privileges to admin (root) access in the system.

References (2)

Core 2
Core References
Third Party Advisory x_refsource_misc
https://hackerone.com/reports/241044

Scores

CVSS v3 8.8
EPSS 0.0133
EPSS Percentile 67.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-269
Status published
Products (1)
ubnt/edgeos < 1.9.1
Published Mar 22, 2018
Tracked Since Feb 18, 2026