Approved changes feed: RSS · Atom

cpe:2.3:o:ui:edgeos:1.9.1:*:*:*:*:*:*:*

part: o version: 1.9.1 update: *

VendorUi (05cd6c40-c92e-5edc-9588-6ff25fd55039)
ProductEdgeos (9b2e41d1-1205-535e-ae5a-6ca3db83efb6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-5265 vulnerable 2026-06-08 05:11:50.536541 Details available
Ubiquiti EdgeOS 1.9.1 on EdgeRouter Lite devices allows remote attackers to execute arbitrary code with admin credentials, because /opt/vyatta/share/vyatta-cfg/templates/system/static-host-mapping/host-name/node.def does not sanitize the 'alias' or 'ips' parameter for shell metacharacters.
Published: 2019-06-07T14:59:43.000Z
Updated: 2024-08-05T05:33:44.365Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.