Vulnerability · Published Aug 17, 2020 · Assigned by hackerone
CVE-2020-8232
Medium 6.5
In plain English
A medium-severity information exposure in EdgeSwitch firmware v1.9.0 and prior. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.7% (higher than 78% of all known vulnerabilities).
Severity (CVSS NVD)6.5Medium
Exploit odds (30 days)1.7%top 22.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
An information disclosure vulnerability exists in EdgeMax EdgeSwitch firmware v1.9.0 that allowed read only users could obtain unauthorized information through SNMP community pages.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | EdgeSwitch firmware v1.9.0 and prior | Fixed in EdgeMax EdgeSwitch firmware v1.9.1 |
Weakness: CWE-200
References
- https://community.ui.com/releases/Security-advisory-bulletin-014-014/1c32c056-2c64-4e60-ac23-ce7d8f387821 x_refsource_MISC
- https://community.ui.com/releases/EdgeMAX-EdgeSwitch-Firmware-v1-9-1-v1-9-1/8a87dfc5-70f5-4055-8d67-570db1f5695c x_refsource_MISC
- https://www.ui.com/download/edgemax x_refsource_MISC