CWE Code: 352
Vulnerability Type: privilege_escalation
CVSS Score: 8.5
CWE Name:  Cross-Site Request Forgery (CSRF)
Summary: ubiquiti networks edgeos version 1.9.1 and prior suffer from a cross-site request forgery (csrf) vulnerability. an attacker with access to an operator (read-only) account could lure an admin (root) user to access the attacker-controlled page, allowing the attacker to gain admin privileges in the system.
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2018-03-22
Last Modified Date: 2019-10-09