CVE-2019-16889

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2019-09-25 · updated 2026-06-17
Weakness: CWE-770

Description

Ubiquiti EdgeMAX devices before 2.0.3 allow remote attackers to cause a denial of service (disk consumption) because *.cache files in /var/run/beaker/container_file/ are created when providing a valid length payload of 249 characters or fewer to the beaker.session.id cookie in a GET header. The attacker can use a long series of unique session IDs.

Affected products

Ui Ep-R6 Firmware: before 2.0.3 — fixed in 2.0.3
Ui Ep-R8 Firmware: before 2.0.3 — fixed in 2.0.3
Ui Er-12 Firmware: before 2.0.3 — fixed in 2.0.3
Ui Er-4 Firmware: before 2.0.3 — fixed in 2.0.3
Ui Er-6P Firmware: before 2.0.3 — fixed in 2.0.3
Ui Er-8-Xg Firmware: before 2.0.3 — fixed in 2.0.3
Ui Er-8 Firmware: before 2.0.3 — fixed in 2.0.3
Ui Er-X-Sfp Firmware: before 2.0.3 — fixed in 2.0.3
Ui Er-X Firmware: before 2.0.3 — fixed in 2.0.3
Ui Erlite-3 Firmware: before 2.0.3 — fixed in 2.0.3
Ui Erpoe-5 Firmware: before 2.0.3 — fixed in 2.0.3
Ui Erpro-8 Firmware: before 2.0.3 — fixed in 2.0.3

How to fix

Upgrade to a fixed version: Ui Ep-R6 Firmware 2.0.3; Ui Ep-R8 Firmware 2.0.3; Ui Er-12 Firmware 2.0.3; Ui Er-4 Firmware 2.0.3; Ui Er-6P Firmware 2.0.3; Ui Er-8-Xg Firmware 2.0.3; Ui Er-8 Firmware 2.0.3; Ui Er-X-Sfp Firmware 2.0.3; Ui Er-X Firmware 2.0.3; Ui Erlite-3 Firmware 2.0.3; Ui Erpoe-5 Firmware 2.0.3; Ui Erpro-8 Firmware 2.0.3. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2019-16889 or the next vulnerability affects your stack