Vulnerability Details CVE-2021-22909
A vulnerability found in EdgeMAX EdgeRouter V2.0.9 and earlier could allow a malicious actor to execute a man-in-the-middle (MitM) attack during a firmware update. This vulnerability is fixed in EdgeMAX EdgeRouter V2.0.9-hotfix.1 and later.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 65.2%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 7.6
References
Products affected by CVE-2021-22909
-
cpe:2.3:h:ui:edgemax_edgerouter:-
-
cpe:2.3:o:ui:edgemax_edgerouter_firmware:-
-
cpe:2.3:o:ui:edgemax_edgerouter_firmware:2.0.9