CVE-2018-5265

Ubiquiti EdgeOS 1.9.1 on EdgeRouter Lite devices allows remote attackers to execute arbitrary code with admin credentials, because…

published June 7, 2019

CVSS
—
EPSS
3%
Percentile
87.0
In the wild
Unconfirmed
What it is

Ubiquiti EdgeOS 1.9.1 on EdgeRouter Lite devices allows remote attackers to execute arbitrary code with admin credentials, because /opt/vyatta/share/vyatta-cfg/templates/system/static-host-mapping/host-name/node.def does not sanitize the 'alias' or 'ips' parameter for shell metacharacters.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02926 · 87.0th percentile
Published
2019-06-07T14:59Z
EPSS history
Timeline
  • 07 JUN 14:59Z
    Ubiquiti EdgeOS 1.9.1 on EdgeRouter Lite devices allows remote attackers to execute arbitrary code with admin credentials, because…
    cvelistv5