A critical command injection vulnerability in Ubiquiti EdgeMAX EdgeSwitch versions 1.10.4 and earlier presents a significant risk of total system compromise.

This is an improper input validation flaw that enables command injection. It requires an attacker to have access to the adjacent network, but does not require authentication.

Successful exploitation of this vulnerability allows an unauthorized actor to execute arbitrary commands on the affected networking hardware. This could lead to a complete loss of confidentiality, integrity, and availability of the switch, potentially providing a foothold for lateral movement into the wider enterprise network. Given the CVSS score of 7.5, this is a high-severity issue that necessitates immediate attention to prevent network disruption or unauthorized data access.

Immediate Action: Upgrade all affected EdgeMAX EdgeSwitch devices to version 1.11.0 or later to ensure the input validation flaw is corrected.

Proactive Monitoring: Monitor network traffic for unusual management requests or unexpected command sequences originating from adjacent devices, and regularly review system access logs for unauthorized attempts.

Compensating Controls: Restrict access to the switch management interface to trusted administrative subnets and employ network segmentation to minimize the number of devices capable of communicating with the switch on the adjacent network.

Public Exploit Available: No (exploit_available: false)

The vulnerability represents a high-risk security gap in critical infrastructure hardware. Administrators should prioritize upgrading all EdgeMAX EdgeSwitch units to version 1.11.0 or higher immediately. Failure to patch these devices leaves the network vulnerable to potential command injection attacks that could lead to full device takeover.