High severity8.8NVD Advisory· Published Apr 10, 2019· Updated Jun 17, 2026

CVE-2019-5424

Description

In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, a privileged user can execute arbitrary shell commands over the SSH CLI interface. This allows to execute shell commands under the root user.

Affected products

UI/Edgeswitch X
cpe:2.3:a:ui:edgeswitch_x:*:*:*:*:*:*:*:*
Range: <=1.1.0
Ubiquitinetworks/Edgeswitchllm-fuzzy
Range: <=1.1.0
Ubiquiti Networks/EdgeMAXv5
Range: EdgeSwitch X prior to v1.1.1

Patches

Vulnerability mechanics

References

community.ubnt.com/t5/EdgeMAX-Updates-Blog/EdgeMAX-EdgeSwitch-X-software-release-v1-1-1/ba-p/2731137nvdPatchVendor Advisory
hackerone.com/reports/508256nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000