description: A vulnerability exists in The EdgeMax EdgeSwitch firmware <v1.9.1 where the EdgeSwitch legacy web interface SIDSSL cookie for admin can be guessed, enabling the attacker to obtain high privileges and get a root shell by a Command injection.
problem types: Insufficient Session Expiration (CWE-613)
affected:
{
product: EdgeSwitch firmware v1.9.0 and prior
vendor: n/a
versions:
status: affected, version: Fixed in EdgeMarx Edge Switch firmware v1.9.1
}