CVE-2021-22909CWE-300
A vulnerability found in EdgeMAX EdgeRouter V2.0.9 and earlier could allow a malicious actor to execute a man-in-the-middle (MitM) attack during a firmware…
published May 27, 2021
What it is
A vulnerability found in EdgeMAX EdgeRouter V2.0.9 and earlier could allow a malicious actor to execute a man-in-the-middle (MitM) attack during a firmware update. This vulnerability is fixed in EdgeMAX EdgeRouter V2.0.9-hotfix.1 and later.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.01292 · 70.0th percentile
- Weakness
- CWE-300 · Channel Accessible by Non-Endpoint
- Published
- 2021-05-27T11:14Z
EPSS history
Timeline