CVE-2020-8234

CRITICAL

9.8

CVSS Score

Published: August 21, 2020 at 08:37 PM UTC

Updated: June 17, 2026 at 03:26 AM UTC

13 products affected across 1 vendorEdgemax FirmwareEs-12FEs-16-150W

Using EdgeSwitch firmware v1.9.0 and prior by N/A?

Get instant alerts when new vulnerabilities affect EdgeSwitch firmware v1.9.0 and prior - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

CRITICAL9.8

Exploit prediction

EPSS 3%

Description

A vulnerability exists in The EdgeMax EdgeSwitch firmware <v1.9.1 where the EdgeSwitch legacy web interface SIDSSL cookie for admin can be guessed, enabling the attacker to obtain high privileges and get a root shell by a Command injection.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Edgemax Firmware · UI

95%

v < 1.9.1

Affected range stops below 1.9.1, so it looks safe — our inference, not a vendor statement

ui-ep-s16 (environment) · ui-es-12f (environment) · ui-es-16-150w (environment) · ui-es-16-xg (environment) · ui-es-24-250w (environment) · ui-es-24-500w (environment) · ui-es-24-lite (environment) · ui-es-48-500w (environment) · ui-es-48-750w (environment) · ui-es-48-lite (environment) · ui-es-8-150w (environment)

Edgeswitch · UI

60%

All versions

Vendor states this is fixed in 1.9.1 (unaffected)

Ep-S16 · UIdevice

80%

All versions

Es-12F · UIdevice

80%

All versions

Es-16-150W · UIdevice

80%