CVE-2019-5446 - Command Injection in EdgeMAX EdgeSwitch prior to 1.8.2 allow an Admin user to execute commands as root

HIGH

Command Injection in EdgeMAX EdgeSwitch prior to 1.8.2 allow an Admin user to execute commands as root

Published Jul 10, 2019

7.2

HIGH

CVSS 3.1

EPSS 2.66%

Command Injection in EdgeMAX EdgeSwitch prior to 1.8.2 allow an Admin user to execute commands as root.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

EdgeMAX

n/a

Version	Status	Constraints
1.8.1	affected	-

No remediation recorded yet.

Weaknesses (1)

CWE-77

Link	Providers	Tags
https://community.ui.com/releases/EdgeMAX-EdgeSwitch-Firmware-v1-8-2/824d58b1-6027-49cf-878d-2076c01948b7		x_refsource_MISCRelease NotesVendor Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner hackerone

Published Jul 10, 2019

Updated Aug 4, 2024

Reserved Jan 4, 2019

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a