Security Advisory

CVE-2020-8234

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-08-21 20:37:22
Last updated 2024-08-04 09:56:27
Assigner hackerone
CVSS score not scored
State PUBLISHED

Description

A vulnerability exists in The EdgeMax EdgeSwitch firmware <v1.9.1 where the EdgeSwitch legacy web interface SIDSSL cookie for admin can be guessed, enabling the attacker to obtain high privileges and get a root shell by a Command injection.