First published: Mon Aug 17 2020(Updated: )
An information disclosure vulnerability exists in EdgeMax EdgeSwitch firmware v1.9.0 that allowed read only users could obtain unauthorized information through SNMP community pages.
Credit: support@hackerone.com
Affected Software | Affected Version | How to fix |
---|---|---|
Ui Edgeswitch Firmware | <1.9.0 | |
Ui Ep-16-xg | ||
Ui Ep-s16 | ||
Ui Es-12f | ||
Ui Es-16-150w | ||
Ui Es-24-250w | ||
Ui Es-24-500w | ||
Ui Es-24-lite | ||
Ui Es-48-500w | ||
Ui Es-48-750w | ||
Ui Es-48-lite | ||
Ui Es-8-150w |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-8232 is an information disclosure vulnerability that exists in EdgeMax EdgeSwitch firmware v1.9.0.
CVE-2020-8232 allows read-only users to obtain unauthorized information through SNMP community pages.
EdgeMax EdgeSwitch firmware v1.9.0 is the only affected software version.
CVE-2020-8232 has a severity value of 6.5 out of 10.
To fix CVE-2020-8232, it is recommended to update to EdgeMax EdgeSwitch firmware version 1.9.1 or higher.