VULNERABILITY INTELLIGENCE

CVE-2017-0935

CVSS score8.8 HIGH

EPSS probability1.27%

CISA KEVNot currently listed

Published2018-03-22

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Ubiquiti Networks EdgeOS version 1.9.1.1 and prior suffer from an Improper Privilege Management vulnerability due to the lack of protection of the file system leading to sensitive information being exposed. An attacker with access to an operator (read-only) account could escalate privileges to admin (root) access in the system.

Weakness classification

CWE-269: Improper Privilege Management

Primary references

support@hackerone.com — Patch, Vendor Advisory
support@hackerone.com — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory