What is CVE-2019-5446?

CVE-2019-5446 is a high-severity vulnerability in Ui Edgeswitch_firmware, classified under Command Injection. CVSS score: 7.2/10. Published 2019-07-10.

How severe is CVE-2019-5446?

High severity. CVSS v3 base score is 7.2 out of 10.

RCE in Ui Edgeswitch_firmware

CVE-2019-5446

Command Injection in EdgeMAX EdgeSwitch prior to 1.8.2 allow an Admin user to execute commands as root.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.027 (84.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Ui Edgeswitch_firmware
Ui Ep-s16.
Ui Es-12f
Ui Es-16-150w
Ui Es-16-xg
Ui Es-24-250w
Ui Es-24-500w
Ui Es-24-lite
Ui Es-48-500w
Ui Es-48-750w

Weakness classification (CWE)

CWE-77 — Command Injection

References

support@hackerone.com (x_refsource_MISC, Release Notes, Vendor Advisory)

Frequently asked questions

What is CVE-2019-5446?: CVE-2019-5446 is a high-severity vulnerability in Ui Edgeswitch_firmware, classified under Command Injection. CVSS score: 7.2/10. Published 2019-07-10.
How severe is CVE-2019-5446?: High severity. CVSS v3 base score is 7.2 out of 10.