What’s Vulnerable › Vulnerabilities

CVE-2019-5446

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-07-10 · updated 2026-06-17
• Weakness: CWE-77

Description

Command Injection in EdgeMAX EdgeSwitch prior to 1.8.2 allow an Admin user to execute commands as root.

Affected products

• Ui Edgeswitch Firmware: before 1.8.2 — fixed in 1.8.2

How to fix

Upgrade to a fixed version: Ui Edgeswitch Firmware 1.8.2. Check the vendor advisory for mitigations.

References

• https://community.ui.com/releases/EdgeMAX-EdgeSwitch-Firmware-v1-8-2/824d58b1-6027-49cf-878d-2076c01948b7
• https://community.ui.com/releases/EdgeMAX-EdgeSwitch-Firmware-v1-8-2/824d58b1-6027-49cf-878d-2076c01948b7

Get alerted when CVE-2019-5446 or the next vulnerability affects your stack