CVE-2019-5426CWE-287

In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an unauthenticated user can use the "local port forwarding" and "dynamic port forwarding" (SOCKS proxy)…

published April 10, 2019

CVSS
—
EPSS
1%
Percentile
56.4
In the wild
Unconfirmed
What it is

In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an unauthenticated user can use the "local port forwarding" and "dynamic port forwarding" (SOCKS proxy) functionalities. Remote attackers without credentials can exploit this bug to access local services or forward traffic through the device if SSH is enabled in the system settings.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00809 · 56.4th percentile
Weakness
CWE-287 · Improper Authentication
Published
2019-04-10T17:53Z
EPSS history
Timeline
  • 10 APR 17:53Z
    In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an unauthenticated user can use the "local port forwarding" and "dynamic port forwarding" (SOCKS proxy)…
    cvelistv5