← Database

CVE-2022-43553

HIGH CVSS: 8.8 Published: 2022-12-05 Modified: 2026-06-17

Description

A remote code execution vulnerability in EdgeRouters (Version 2.0.9-hotfix.4 and earlier) allows a malicious actor with an operator account to run arbitrary administrator commands.This vulnerability is fixed in Version 2.0.9-hotfix.5 and later.

Affected Platforms

Ui Edgemax EdgerouterUi Edgemax Edgerouter Firmware

Weakness Type

CWE-250, NVD-CWE-noinfo

References