Ubiquiti Inc. · Report #508256
EdgeSwitch Command Injection
Validstatus
mediumseverity
15upvotes
31 Mar 2019disclosed
Summary
In EdgeSwitch X v1.1.0 and prior, a privileged user can execute arbitrary shell commands over the SSH CLI interface. This allows to execute shell commands under the root user.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.