Format String Vulnerability in the EdgeSwitch restricted CLI

Summary

In EdgeSwitch 1.7.3 and prior, an user with admin credentials can make use of specially crafted commands to execute arbitrary shell instructions, bypassing the SSH/TELNET CLI interface.

There was a format string vulnerability present in the Admin CLI for the EdgeSwitch.

Exploiting this vulnerability allows an attacker to break out of the restricted CLI and elevate their privileges greater than the administrator themselves are able to, taking full control of the Switch without the administrator ever knowing.