CVE-2017-0933

CVE-2017-0933 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Ubiquiti Networks EdgeOS version 1.9.1 and earlier. An attacker with operator-level access could trick an administrator into visiting a malicious page, thereby escalating the attacker's privileges to full administrative control. This vulnerability carries a high CVSS score of 8.0, indicating a significant risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. Successful exploitation allows for complete compromise of the affected system. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or Nuclei, or entries in ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered widespread attention.