Vulnerabilities > UI > Edgeswitch Firmware > 1.7.1

DATE CVE VULNERABILITY TITLE RISK
2020-08-17 CVE-2020-8233 OS Command Injection vulnerability in multiple products
A command injection vulnerability exists in EdgeSwitch firmware <v1.9.0 that allowed an authenticated read-only user to execute arbitrary shell commands over the HTTP interface, allowing them to escalate privileges.
network
low complexity
ui opensuse CWE-78
8.8
8.8
2020-08-17 CVE-2020-8232 Information Exposure vulnerability in UI Edgeswitch Firmware 1.7.1
An information disclosure vulnerability exists in EdgeMax EdgeSwitch firmware v1.9.0 that allowed read only users could obtain unauthorized information through SNMP community pages.
network
low complexity
ui CWE-200
6.5
6.5