Skip to content
OpenAdvisories
Unscored CVE-2020-8126 EUVD-2020-29033GHSA-jwff-27h9-qvq4

A privilege escalation in the EdgeSwitch prior to version 1.7.1, an CGI script don't fully sanitize the user input resulting in local comma…

Published Feb 7, 2020 · Updated Aug 4, 2024 · Assigned by hackerone

Description

A privilege escalation in the EdgeSwitch prior to version 1.7.1, an CGI script don't fully sanitize the user input resulting in local commands execution, allowing an operator user (Privilege-1) to escalate privileges and became administrator (Privilege-15).

Affected products

VendorProductAffectedFixed
— EdgeSwitch 1.7.0 —

References