7.5
/ 10
HIGH
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
An Improper Input Validation in EdgeMAX EdgeSwitch (Version 1.10.4 and earlier) could allow a Command Injection by a malicious actor with access to EdgeSwitch adjacent network.
Basic Information
ID
CVE-2025-27211
Source
hackerone
Published
Aug 4, 2025 at 22:12
Modified
Aug 5, 2025 at 13:26
Affected Product
Vendor
Ubiquiti Inc
Product
EdgeMAX EdgeSwitch
Version
1.11.0