CVE-2020-8233 - AskarLabs CVE Database

CVE-2020-8233

Vendor N/A

Product EdgeSwitch firmware v1.9.0 and prior

Weakness CWE-77

Published August 17, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A command injection vulnerability exists in EdgeSwitch firmware <v1.9.0 that allowed an authenticated read-only user to execute arbitrary shell commands over the HTTP interface, allowing them to escalate privileges.

Key dates

02Disclosure timeline

August 17, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-8233 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/77.html