First published: Mon Aug 17 2020(Updated: )
An information disclosure vulnerability exists in EdgeMax EdgeSwitch firmware v1.9.0 that allowed read only users could obtain unauthorized information through SNMP community pages.
Credit: support@hackerone.com
Affected Software | Affected Version | How to fix |
---|---|---|
Ubiquiti EdgeSwitch Firmware | <1.9.0 | |
ui ep-16-xg | ||
ui ep-s16 | ||
UI ES-12F | ||
ui es-16-150w | ||
ui es-24-250w | ||
ui es-24-500w | ||
ui es-24-lite | ||
UI ES-48-500W | ||
UI ES-48-750W | ||
ui es-48-lite | ||
ui es-8-150w |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-8232 is an information disclosure vulnerability that exists in EdgeMax EdgeSwitch firmware v1.9.0.
CVE-2020-8232 allows read-only users to obtain unauthorized information through SNMP community pages.
EdgeMax EdgeSwitch firmware v1.9.0 is the only affected software version.
CVE-2020-8232 has a severity value of 6.5 out of 10.
To fix CVE-2020-8232, it is recommended to update to EdgeMax EdgeSwitch firmware version 1.9.1 or higher.