description: A command injection vulnerability exists in EdgeSwitch firmware <v1.9.0 that allowed an authenticated read-only user to execute arbitrary shell commands over the HTTP interface, allowing them to escalate privileges.
problem types: Command Injection - Generic (CWE-77)
affected:
{
product: EdgeSwitch firmware v1.9.0 and prior
vendor: n/a
versions:
status: affected, version: Fixed version EdgeSwitch firmware v1.9.1
}