← Vulnerability feed

Vulnerability record · CVE-2019-16889 · published 25 September 2019

CVE-2019-16889: Ui er-x firmware allocation without limits vulnerability

Ui · Er X Firmware

Ubiquiti EdgeMAX devices before 2.0.3 allow remote attackers to cause a denial of service (disk consumption) because *.cache files in /var/run/beaker/container_file/ are created when providing a valid length payload of 249 characters or fewer to the beaker.session.id cookie in a GET header. The attacker can use a long series of unique session IDs.

7.5 CVSS 3.1 High EPSS 5.1% · top 7.9% CWE-770 · Allocation without limits
7.5CVSS 3.1 base score, v2 7.8
5.1%EPSS exploitation probability, 30 days
NoNot in CISA KEV
12Affected product versions listed by NVD
6References, 4 tagged exploit
17 Jun 2026Last modified by NVD

Description

Ubiquiti EdgeMAX devices before 2.0.3 allow remote attackers to cause a denial of service (disk consumption) because *.cache files in /var/run/beaker/container_file/ are created when providing a valid length payload of 249 characters or fewer to the beaker.session.id cookie in a GET header. The attacker can use a long series of unique session IDs.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

12 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://community.ui.com/releases/New-EdgeRouter-firmware-2-0-3-has-been-released-2-0-3/e8badd28-a112-4269-9fb6-ffe3fc0e PatchVendor Advisory
https://hackerone.com/reports/406614 ExploitIssue TrackingThird Party Advisory
https://mjlanders.com/2019/07/28/resource-consumption-dos-on-edgemax-v1-10-6/ ExploitThird Party Advisory
https://community.ui.com/releases/New-EdgeRouter-firmware-2-0-3-has-been-released-2-0-3/e8badd28-a112-4269-9fb6-ffe3fc0e PatchVendor Advisory
https://hackerone.com/reports/406614 ExploitIssue TrackingThird Party Advisory
https://mjlanders.com/2019/07/28/resource-consumption-dos-on-edgemax-v1-10-6/ ExploitThird Party Advisory

Track CVE-2019-16889 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2023-23912Ui usg firmware code injection vulnerabilityA vulnerability, found in EdgeRouters Version 2.0.9-hotfix.5 and earlier and UniFi Security Gateways (USG) Version 4.4.56 and earlier with their DHCP…EPSS 0.89%8.6CVE-2020-3569Cisco IOS XR DVMRP IGMP packet handling memory exhaustionCisco IOS XR Software mishandles IGMP packets in its Distance Vector Multicast Routing Protocol (DVMRP) feature, allowing crafted traffic to crash th…KEVEPSS 3.3%analysed8.6CVE-2020-3566Cisco IOS XR DVMRP IGMP queue flaw causes memory exhaustionCisco IOS XR Software mishandles queue management for IGMP packets in its DVMRP feature, allowing uncontrolled memory consumption. An unauthenticated…KEVEPSS 3.7%analysed

Source: NIST National Vulnerability Database (record CVE-2019-16889), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.