CVE-2017-6079

CRITICAL

9.8

CVSS Score

Published: May 16, 2017 at 05:00 PM UTC

Updated: June 17, 2026 at 01:21 AM UTC

11 products affected across 1 vendorEdgemarc FirmwareEdgemarc 7301Edgemarc 4550

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

CRITICAL9.8

Exploit prediction

EPSS 47%

Description

The HTTP web-management application on Edgewater Networks Edgemarc appliances has a hidden page that allows for user-defined commands such as specific iptables routes, etc., to be set. You can use this page as a web shell essentially to execute commands, though you get no feedback client-side from the web application: if the command is valid, it executes. An example is the wget command. The page that allows this has been confirmed in firmware as old as 2006.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Edgemarc Firmware · Ribboncommunications

95%

All versions

ribboncommunications-edgemarc-4550 (same device) · ribboncommunications-edgemarc-4552 (same device) · ribboncommunications-edgemarc-4601 (same device) · ribboncommunications-edgemarc-4700 (same device) · ribboncommunications-edgemarc-4750 (same device) · ribboncommunications-edgemarc-4800 (same device) · ribboncommunications-edgemarc-4806 (same device) · ribboncommunications-edgemarc-4808 (same device) · ribboncommunications-edgemarc-7301 (same device) · ribboncommunications-edgemarc-7400 (same device)

Edgemarc 4550 · Ribboncommunicationsdevice

80%

All versions

Edgemarc 4552 · Ribboncommunicationsdevice

80%

All versions

Edgemarc 4601 · Ribboncommunicationsdevice

80%

All versions

Edgemarc 4700 · Ribboncommunicationsdevice

80%

All versions