CVE-2017-0934: Critical severity Ubnt Edgeos vulnerability
Ubiquiti Networks EdgeOS version 1.9.1 and prior suffer from an Improper Privilege Management vulnerability due to the lack of protection of the file system leading to sensitive information being exposed. An attacker with access to an operator (read-only) account could escalate privileges to admin (root) access in the system.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2017-0934?
CVE-2017-0934 is a vulnerability in Ubiquiti Networks EdgeOS version 1.9.1 and prior that allows an attacker with access to an operator account to escalate privileges to admin and gain sensitive information.
How severe is CVE-2017-0934?
CVE-2017-0934 has a severity score of 8.8 (critical) according to the CVSS (Common Vulnerability Scoring System).
How does CVE-2017-0934 occur?
CVE-2017-0934 occurs due to improper privilege management and the lack of protection of the file system in Ubiquiti Networks EdgeOS version 1.9.1 and prior.
What is the affected software and version for CVE-2017-0934?
The affected software is Ubiquiti Networks EdgeOS version 1.9.1 and prior.
How can I fix CVE-2017-0934?
To fix CVE-2017-0934, upgrade to a version of Ubiquiti Networks EdgeOS that is higher than 1.9.1.