CVE-2020-8234 - AskarLabs CVE Database

CVE-2020-8234

Vendor N/A

Product EdgeSwitch firmware v1.9.0 and prior

Weakness CWE-613 · Insufficient session expiration

Published August 21, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A vulnerability exists in The EdgeMax EdgeSwitch firmware <v1.9.1 where the EdgeSwitch legacy web interface SIDSSL cookie for admin can be guessed, enabling the attacker to obtain high privileges and get a root shell by a Command injection.

Key dates

02Disclosure timeline

August 21, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-8234 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/613.html

Related vulnerabilities

04Related CVE

CVE-2026-34828 listmonk: Active sessions remain valid after password reset and password change CVE-2026-44648 SillyTavern: Existing sessions are not invalidated after password change, allowing session reuse and account takeover CVE-2026-53824 Mattermost plugin for OpenClaw < 2026.4.24 - Slash Token Revocation Lag via Monitor Refresh Delay CVE-2026-44511 Katalyst Koi: Session cookies can be replayed after user logout CVE-2026-34454 OAuth2 Proxy: Session cookie not cleared when rendering sign-in page