CVE-2019-5425

HIGH 8.8CVE-2019-5425 · Published 10/04/2019 · updated 17/06/2026

In short

CVE-2019-5425 is a HIGH (CVSS 8.8) vulnerability affecting edgeswitch x (ui).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
edgeswitch x ui	`≤ 1.1.0`	No fix yet

Description

In Ubiquiti Networks EdgeSwitch X v1.1.0 and prior, an authenticated user can execute arbitrary shell commands over the SSH interface bypassing the CLI interface, which allow them to escalate privileges to root.

References

community.ubnt.com/t5/EdgeMAX-Updates-Blog/EdgeMAX-EdgeSwitch-X-software-release-v1-1-1/ba-p/2731137 · Mitigation
hackerone.com/reports/511025 · Third Party Advisory

More vulnerabilities in edgeswitch x

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free