CVE-2017-0932

Ubiquiti Networks EdgeOS version 1.9.1.1 and prior suffer from an Improper Privilege Management vulnerability due to the lack of validation on the input of the Feature functionality. An attacker with access to an operator (read-only) account and ssh connection to the devices could escalate privileges to admin (root) access in the system.

• CWE-269
• CWE-269

• https://community.ubnt.com/t5/EdgeMAX-Updates-Blog/EdgeMAX-EdgeRouter-software-security-release-v1-9-7-hotfix-3/ba-p/2054117Patch, Vendor Advisory
• https://hackerone.com/reports/239719Third Party Advisory
• https://community.ubnt.com/t5/EdgeMAX-Updates-Blog/EdgeMAX-EdgeRouter-software-security-release-v1-9-7-hotfix-3/ba-p/2054117Patch, Vendor Advisory
• https://hackerone.com/reports/239719Third Party Advisory

Published

Mar 22, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-0926Gitlab Community Edition version 10.3 is vulnerable to an im…
• CVE-2017-0927Gitlab Community Edition version 10.3 is vulnerable to an im…
• CVE-2017-0928html-janitor node module suffers from an External Control of…
• CVE-2017-0929DNN (aka DotNetNuke) before 9.2.0 suffers from a Server-Side…
• CVE-2017-0930augustine node module suffers from a Path Traversal vulnerab…
• CVE-2017-0931html-janitor node module suffers from a Cross-Site Scripting…6.1
• CVE-2017-0933Ubiquiti Networks EdgeOS version 1.9.1 and prior suffer from…
• CVE-2017-0934Ubiquiti Networks EdgeOS version 1.9.1 and prior suffer from…
• CVE-2017-0935Ubiquiti Networks EdgeOS version 1.9.1.1 and prior suffer fr…8.8
• CVE-2017-0936Nextcloud Server before 11.0.7 and 12.0.5 suffers from an Au…
• CVE-2017-0938Denial of Service attack in airMAX < 8.3.2 , airMAX < 6.0.7 …7.5
• CVE-2017-0981Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…