Security Advisory

CVE-2020-8233

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-08-17 15:41:19
Last updated 2024-08-04 09:56:27
Assigner hackerone
State PUBLISHED

Description

A command injection vulnerability exists in EdgeSwitch firmware <v1.9.0 that allowed an authenticated read-only user to execute arbitrary shell commands over the HTTP interface, allowing them to escalate privileges.