VYPR
← All advisories
High severity8.8NVD Advisory· Published Dec 5, 2022· Updated Jun 17, 2026

CVE-2022-43553

CVE-2022-43553

Description

A remote code execution vulnerability in EdgeRouters (Version 2.0.9-hotfix.4 and earlier) allows a malicious actor with an operator account to run arbitrary administrator commands.This vulnerability is fixed in Version 2.0.9-hotfix.5 and later.

Affected products

7
  • UI/Edgemax Edgerouter Firmware5 versions
    cpe:2.3:o:ui:edgemax_edgerouter_firmware:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:o:ui:edgemax_edgerouter_firmware:*:*:*:*:*:*:*:*range: <2.0.9
    • cpe:2.3:o:ui:edgemax_edgerouter_firmware:2.0.9:-:*:*:*:*:*:*
    • cpe:2.3:o:ui:edgemax_edgerouter_firmware:2.0.9:hotfix1:*:*:*:*:*:*
    • cpe:2.3:o:ui:edgemax_edgerouter_firmware:2.0.9:hotfix2:*:*:*:*:*:*
    • cpe:2.3:o:ui:edgemax_edgerouter_firmware:2.0.9:hotfix4:*:*:*:*:*:*
  • EdgeRouters/EdgeRoutersdescription
  • Ubiquiti Inc/EdgeRouterllm-fuzzy
    Range: <=2.0.9-hotfix.4

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.