Unscored CVE-2020-8232 EUVD-2020-29104GHSA-qcm4-6gpf-m44q

An information disclosure vulnerability exists in EdgeMax EdgeSwitch firmware v1.9.0 that allowed read only users could obtain unauthorized…

Published Aug 17, 2020 · Updated Aug 4, 2024 · Assigned by hackerone

Description

An information disclosure vulnerability exists in EdgeMax EdgeSwitch firmware v1.9.0 that allowed read only users could obtain unauthorized information through SNMP community pages.

Affected products

Vendor	Product	Affected	Fixed
—	EdgeSwitch firmware v1.9.0 and prior	Fixed in EdgeMax EdgeSwitch firmware v1.9.1	—

References

https://community.ui.com/releases/Security-advisory-bulletin-014-014/1c32c056-2c64-4e60-ac23-ce7d8f387821
https://community.ui.com/releases/EdgeMAX-EdgeSwitch-Firmware-v1-9-1-v1-9-1/8a87dfc5-70f5-4055-8d67-570db1f5695c
https://www.ui.com/download/edgemax