CVE-2023-2374
28.04.2023, 15:15
A vulnerability has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6 and classified as critical. This vulnerability affects unknown code of the component Web Management Interface. The manipulation of the argument ecn-down leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-227650 is the identifier assigned to this vulnerability.
| Vendor | Product | Version |
|---|---|---|
| ui | er-x_firmware | 𝑥 < 2.0.9 |
| ui | er-x_firmware | 2.0.9 |
| ui | er-x_firmware | 2.0.9:hotfix2 |
| ui | er-x_firmware | 2.0.9:hotfix3 |
| ui | er-x_firmware | 2.0.9:hotfix4 |
| ui | er-x_firmware | 2.0.9:hotfix5 |
| ui | er-x_firmware | 2.0.9:hotfix6 |
| ui | er-x-sfp_firmware | 𝑥 < 2.0.9 |
| ui | er-x-sfp_firmware | 2.0.9 |
| ui | er-x-sfp_firmware | 2.0.9:hotfix2 |
| ui | er-x-sfp_firmware | 2.0.9:hotfix4 |
| ui | er-x-sfp_firmware | 2.0.9:hotfix5 |
| ui | er-x-sfp_firmware | 2.0.9:hotfix6 |
𝑥
= Vulnerable software versions