Vulnerability Details CVE-2022-43553
A remote code execution vulnerability in EdgeRouters (Version 2.0.9-hotfix.4 and earlier) allows a malicious actor with an operator account to run arbitrary administrator commands.This vulnerability is fixed in Version 2.0.9-hotfix.5 and later.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.037
EPSS Ranking 87.4%
CVSS Severity
CVSS v3 Score 8.8
References
Products affected by CVE-2022-43553
-
cpe:2.3:h:ui:edgemax_edgerouter:-
-
cpe:2.3:o:ui:edgemax_edgerouter_firmware:-
-
cpe:2.3:o:ui:edgemax_edgerouter_firmware:2.0.9