High severity8.8NVD Advisory· Published Dec 14, 2020· Updated Jun 17, 2026

CVE-2020-8282

Description

A security issue was found in EdgePower 24V/54V firmware v1.7.0 and earlier where, due to missing CSRF protections, an attacker would have been able to perform unauthorized remote code execution.

Affected products

EdgePower/EdgePower 24V/54V firmwaredescription
EdgePower/EdgePowerllm-create
Range: <=1.7.0
Ubiquiti Inc/EdgePower 24V/54Vllm-fuzzy
Range: <=1.7.0
UI/Edgemax Edgepower 24v Firmware
cpe:2.3:o:ui:edgemax_edgepower_24v_firmware:*:*:*:*:*:*:*:*
Range: <=1.7.0
UI/Edgemax Edgepower 54v Firmware
cpe:2.3:o:ui:edgemax_edgepower_54v_firmware:*:*:*:*:*:*:*:*
Range: <=1.7.0

Patches

Vulnerability mechanics

References

community.ui.com/releases/Security-advisory-bulletin-016-016/40c1d33d-785e-44d5-8e6c-56a8addef1bcnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000