CVE-2017-0933CWE-352

Ubiquiti Networks EdgeOS version 1.9.1 and prior suffer from a Cross-Site Request Forgery (CSRF) vulnerability

published March 22, 2018

CVSS
—
EPSS
1%
Percentile
44.5
In the wild
Unconfirmed
What it is

Ubiquiti Networks EdgeOS version 1.9.1 and prior suffer from a Cross-Site Request Forgery (CSRF) vulnerability. An attacker with access to an operator (read-only) account could lure an admin (root) user to access the attacker-controlled page, allowing the attacker to gain admin privileges in the system.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00539 · 44.5th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2018-03-22T14:00Z
EPSS history
Timeline
  • 22 MAR 14:00Z
    Ubiquiti Networks EdgeOS version 1.9.1 and prior suffer from a Cross-Site Request Forgery (CSRF) vulnerability
    cvelistv5