Description
A vulnerability exists in The EdgeMax EdgeSwitch firmware <v1.9.1 where the EdgeSwitch legacy web interface SIDSSL cookie for admin can be guessed, enabling the attacker to obtain high privileges and get a root shell by a Command injection.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | EdgeSwitch firmware v1.9.0 and prior | Fixed in EdgeMarx Edge Switch firmware v1.9.1 | — |