Code injection

2019-09-2520:15:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.5%

JSON

Ubiquiti EdgeMAX devices before 2.0.3 allow remote attackers to cause a denial of service (disk consumption) because *.cache files in /var/run/beaker/container_file/ are created when providing a valid length payload of 249 characters or fewer to the beaker.session.id cookie in a GET header. The attacker can use a long series of unique session IDs.

CPENameOperatorVersion
ep-r6_firmwarelt2.0.3
ep-r8_firmwarelt2.0.3
er-12_firmwarelt2.0.3
er-4_firmwarelt2.0.3
er-6p_firmwarelt2.0.3
er-8-xg_firmwarelt2.0.3
er-8_firmwarelt2.0.3
er-x-sfp_firmwarelt2.0.3
er-x_firmwarelt2.0.3
erlite-3_firmwarelt2.0.3

Name	Operator	Version
ep-r6_firmware	lt	2.0.3
ep-r8_firmware	lt	2.0.3
er-12_firmware	lt	2.0.3
er-4_firmware	lt	2.0.3
er-6p_firmware	lt	2.0.3
er-8-xg_firmware	lt	2.0.3
er-8_firmware	lt	2.0.3
er-x-sfp_firmware	lt	2.0.3
er-x_firmware	lt	2.0.3
erlite-3_firmware	lt	2.0.3