description: A remote code execution vulnerability in EdgeRouters (Version 2.0.9-hotfix.4 and earlier) allows a malicious actor with an operator account to run arbitrary administrator commands.This vulnerability is fixed in Version 2.0.9-hotfix.5 and later.
problem types: Execution with Unnecessary Privileges (CWE-250)
affected:
{
vendor: n/a
product: EdgeMAX EdgeRouter
versions:
version: Fixed Version: 2.0.9-hotfix.5 or later., status: affected
}