PT-2020-20043 · Ubiquiti · Edgemax Edgeswitch

Published 2020-08-17 · Updated 2021-09-23 · CVE-2020-8232

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions EdgeMax EdgeSwitch firmware version 1.9.0

Description An information disclosure issue exists that allows read-only users to obtain unauthorized information through SNMP community pages.

Recommendations For EdgeMax EdgeSwitch firmware version 1.9.0, consider restricting access to SNMP community pages to minimize the risk of exploitation until a patch is available.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2020-8232

Affected Products

Edgemax Edgeswitch

References · 5

• https://osv.dev/vulnerability/CVE-2020-8232 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-8232 · Security Note
• https://community.ui.com/releases/Security-advisory-bulletin-014-014/1c32c056-2c64-4e60-ac23-ce7d8f387821 · Vendor Advisory
• https://community.ui.com/releases/EdgeMAX-EdgeSwitch-Firmware-v1-9-1-v1-9-1/8a87dfc5-70f5-4055-8d67-570db1f5695c · Vendor Advisory
• https://ui.com/download/edgemax · Note