Edgemax Edgeswitch
Monthly
Unauthenticated remote code execution is possible on Ubiquiti EdgeMAX EdgeSwitch devices that have DHCPv6 enabled, triggered by a heap-based buffer overflow (CWE-122) reachable from the local Layer-2 segment. Only switches running firmware below 1.12.2 with DHCPv6 active in the configuration are exposed, and the attacker must already be positioned on an adjacent network (CVSS 8.8, AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) rather than reaching the device over the internet. Vendor patch is available in EdgeMAX EdgeSwitch 1.12.2; no public exploit code has been identified at time of analysis and EPSS is low at 0.27% (19th percentile), consistent with CISA SSVC reporting no observed exploitation and a non-automatable attack path.
Unauthenticated remote code execution is possible on Ubiquiti EdgeMAX EdgeSwitch devices that have DHCPv6 enabled, triggered by a heap-based buffer overflow (CWE-122) reachable from the local Layer-2 segment. Only switches running firmware below 1.12.2 with DHCPv6 active in the configuration are exposed, and the attacker must already be positioned on an adjacent network (CVSS 8.8, AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) rather than reaching the device over the internet. Vendor patch is available in EdgeMAX EdgeSwitch 1.12.2; no public exploit code has been identified at time of analysis and EPSS is low at 0.27% (19th percentile), consistent with CISA SSVC reporting no observed exploitation and a non-automatable attack path.