Ubiquiti Inc. · Report #797988
SNMP Community String Disclosure to ReadOnly Users on EdgeSwitch
Validstatus
highseverity
17upvotes
23 May 2021disclosed
Summary
Read only users could execute unauthorized tasks and through SNMP community string pages.
These vulnerabilities were found on EdgeSwitch 1G switch (ESWH) and EdgeSwitch 10G switch (ESGH) firmware v1.9.0.
The fix for these vulnerabilities were included in the EdgeMax EdgeSwitch firmware v1.9.1 For more details please visit:
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.