Code Execution in restricted CLI of EdgeSwitch

Summary

In EdgeSwitch 1.7.3 and prior, an user with admin credentials can make use of specially crafted commands to execute arbitrary shell instructions, bypassing the SSH/TELNET CLI interface.

A command injection vulnerability existed in the restricted CLI of the EdgeSwitch.

Exploiting this vulnerability allows an attacker to break out of the restricted CLI and elevate their privileges greater than the administrator themselves are able to, taking full control of the Switch without the administrator ever knowing.