High severity · published Sep 25, 2019
CVE-2019-16889
Ubiquiti EdgeMAX devices before 2.0.3 allow remote attackers to cause a denial of service (disk consumption) because *.cache files in /var/run/beaker/container_file/ are created…
7.5
CVSS
5.1%
EPSS
No
On KEV
Description
Ubiquiti EdgeMAX devices before 2.0.3 allow remote attackers to cause a denial of service (disk consumption) because *.cache files in /var/run/beaker/container_file/ are created when providing a valid length payload of 249 characters or fewer to the beaker.session.id cookie in a GET header. The attacker can use a long series of unique session IDs.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)5.1% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EF
Ep-r6 Firmware · UI
before 2.0.3 · source: NVD
EF
Ep-r8 Firmware · UI
before 2.0.3 · source: NVD
EF
Er-12 Firmware · UI
before 2.0.3 · source: NVD
EF
Er-4 Firmware · UI
before 2.0.3 · source: NVD
EF
Er-6p Firmware · UI
before 2.0.3 · source: NVD
EF
Er-8 Firmware · UI
before 2.0.3 · source: NVD
EF
Er-8-xg Firmware · UI
before 2.0.3 · source: NVD
EF
Er-x Firmware · UI
before 2.0.3 · source: NVD
EF
Er-x-sfp Firmware · UI
before 2.0.3 · source: NVD
EF
Erlite-3 Firmware · UI
before 2.0.3 · source: NVD
EF
Erpoe-5 Firmware · UI
before 2.0.3 · source: NVD
EF
Erpro-8 Firmware · UI
before 2.0.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-16889
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-16889
Patch
https://community.ui.com/releases/New-EdgeRouter-firmware-2-0-3-has-been-released-2-0-3/e8badd28-a112-4269-9fb6-ffe3fc0e1643
Exploit
https://hackerone.com/reports/406614
Exploit
https://mjlanders.com/2019/07/28/resource-consumption-dos-on-edgemax-v1-10-6/