CVE-2022-43553 - A remote code execution vulnerability in EdgeRouters (Version 2.0.9-hotfix.4 and earlier) allows a malicious actor with an operator account to run arbitrary administrator commands.This vulnerability is fixed in Version 2.0.9-hotfix.5 and later

Back Back to CVE browser

HIGH

A remote code execution vulnerability in EdgeRouters (Version 2.0.9-hotfix.4 and earlier) allows a malicious actor with an operator account to run arbitrary administrator commands.This vulnerability is fixed in Version 2.0.9-hotfix.5 and later

Published Dec 5, 2022

8.8

HIGH

CVSS 3.1

EPSS 1.13%

Description

A remote code execution vulnerability in EdgeRouters (Version 2.0.9-hotfix.4 and earlier) allows a malicious actor with an operator account to run arbitrary administrator commands.This vulnerability is fixed in Version 2.0.9-hotfix.5 and later.

Affected products

Vendor n/a Product EdgeMAX EdgeRouter Default
n/a
- Version
  Fixed Version: 2.0.9-hotfix.5 or later.
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

EdgeMAX EdgeRouter

n/a

Version	Status	Constraints
Fixed Version: 2.0.9-hotfix.5 or later.	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-250

Execution with Unnecessary Privileges

References (2)

Link	Providers	Tags
https://community.ui.com/releases/Security-Advisory-Bulletin-026-026/07697c65-30b3-4c06-a158-35e06534480d		Vendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-46550		Advisory