HIGH✓ PATCH🇬🇧 English

CVE-2023-23912

CVSS 8.8v3.1pub. 2023-02-09upd. 2025-03-24

A vulnerability, found in EdgeRouters Version 2.0.9-hotfix.5 and earlier and UniFi Security Gateways (USG) Version 4.4.56 and earlier with their DHCPv6 prefix delegation set to dhcpv6-stateless or dhcpv6-stateful, allows a malicious actor directly connected to the WAN interface of an affected device to create a remote code execution vulnerability.

oryginał EN
CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Ui Er 10x

    HW
    Ui
    wszystkie wersje

  • Ui Er 10x Firmware

    OS
    Ui
    2.0.9< 2.0.9

  • Ui Er 12

    HW
    Ui
    wszystkie wersje

  • Ui Er 12 Firmware

    OS
    Ui
    2.0.9< 2.0.9

  • Ui Er 12p

    HW
    Ui
    wszystkie wersje

  • Ui Er 12p Firmware

    OS
    Ui
    2.0.9< 2.0.9

  • Ui Er 4

    HW
    Ui
    wszystkie wersje

  • Ui Er 4 Firmware

    OS
    Ui
    2.0.9< 2.0.9

  • Ui Er 6p

    HW
    Ui
    wszystkie wersje

  • Ui Er 6p Firmware

    OS
    Ui
    2.0.9< 2.0.9

  • Ui Er 8 Xg

    HW
    Ui
    wszystkie wersje

  • Ui Er 8 Xg Firmware

    OS
    Ui
    2.0.9< 2.0.9

  • Ui Er X

    HW
    Ui
    wszystkie wersje

  • Ui Er X Firmware

    OS
    Ui
    2.0.9< 2.0.9

  • Ui Er X Sfp

    HW
    Ui
    wszystkie wersje

  • Ui Er X Sfp Firmware

    OS
    Ui
    2.0.9< 2.0.9

  • Ui Usg

    HW
    Ui
    wszystkie wersje

  • Ui Usg Firmware

    OS
    Ui
    < 4.4.57

  • Ui Usg Pro 4

    HW
    Ui
    wszystkie wersje

  • Ui Usg Pro 4 Firmware

    OS
    Ui
    < 4.4.57
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
RCE
CWE
Referencje

Powiązane podatności

CVE-2023-2379HIGH7.5ten sam produkt

A vulnerability classified as critical has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This affe...

CVE-2019-16889HIGH7.5ten sam produkt

Ubiquiti EdgeMAX devices before 2.0.3 allow remote attackers to cause a denial of service (disk consumption) b...

CVE-2023-2374MEDIUM6.3ten sam produkt

A vulnerability has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6 and classified as critical. This ...

CVE-2023-2375MEDIUM6.3ten sam produkt

A vulnerability was found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6 and classified as critical. This issue...

CVE-2023-2376MEDIUM6.3ten sam produkt

A vulnerability was found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. It has been classified as critical. A...