VulnerabilityModified
CVE-2020-8232
An information disclosure vulnerability exists in EdgeMax EdgeSwitch firmware v1.9.0 that allowed read only users could obtain unauthorized information through SNMP community pages.
MEDIUM 6.5EPSS 1.74%
Does this matter?
Lower severity and a low EPSS score (1.74%). Track it; it rarely justifies an emergency change on its own.
Description
An information disclosure vulnerability exists in EdgeMax EdgeSwitch firmware v1.9.0 that allowed read only users could obtain unauthorized information through SNMP community pages.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 1.74% probability · 76th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- ui/edgeswitch firmware
- Source
- support@hackerone.com
References
- https://community.ui.com/releases/EdgeMAX-EdgeSwitch-Firmware-v1-9-1-v1-9-1/8a87dfc5-70f5-4055-8d67-570db1f5695cPatch, Release Notes, Vendor Advisory
- https://community.ui.com/releases/Security-advisory-bulletin-014-014/1c32c056-2c64-4e60-ac23-ce7d8f387821Vendor Advisory
- https://www.ui.com/download/edgemaxProduct
- https://community.ui.com/releases/EdgeMAX-EdgeSwitch-Firmware-v1-9-1-v1-9-1/8a87dfc5-70f5-4055-8d67-570db1f5695cPatch, Release Notes, Vendor Advisory
- https://community.ui.com/releases/Security-advisory-bulletin-014-014/1c32c056-2c64-4e60-ac23-ce7d8f387821Vendor Advisory
- https://www.ui.com/download/edgemaxProduct
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.