Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-2377

A vulnerability was found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Web Management Interface. The manipulation of the argument name leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-227653 was assigned to this vulnerability.

Published

2023-04-28T16:15:10.003

Last Modified

2024-11-21T07:58:29.533

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

8.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-77
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System ui er-x_firmware < 2.0.9 Yes
Operating System ui er-x_firmware 2.0.9 Yes
Operating System ui er-x_firmware 2.0.9 Yes
Operating System ui er-x_firmware 2.0.9 Yes
Operating System ui er-x_firmware 2.0.9 Yes
Operating System ui er-x_firmware 2.0.9 Yes
Hardware ui er-x - No
Operating System ui er-x-sfp_firmware < 2.0.9 Yes
Operating System ui er-x-sfp_firmware 2.0.9 Yes
Operating System ui er-x-sfp_firmware 2.0.9 Yes
Operating System ui er-x-sfp_firmware 2.0.9 Yes
Operating System ui er-x-sfp_firmware 2.0.9 Yes
Operating System ui er-x-sfp_firmware 2.0.9 Yes
Operating System ui er-x-sfp_firmware 2.0.9 Yes
Hardware ui er-x-sfp - No
References