CVE-2023-2378
28.04.2023, 16:15
A vulnerability was found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. It has been rated as critical. Affected by this issue is some unknown functionality of the component Web Management Interface. The manipulation of the argument suffix-rate-up leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-227654 is the identifier assigned to this vulnerability.
| Vendor | Product | Version |
|---|---|---|
| ui | er-x_firmware | 𝑥 < 2.0.9 |
| ui | er-x_firmware | 2.0.9 |
| ui | er-x_firmware | 2.0.9:hotfix2 |
| ui | er-x_firmware | 2.0.9:hotfix3 |
| ui | er-x_firmware | 2.0.9:hotfix4 |
| ui | er-x_firmware | 2.0.9:hotfix5 |
| ui | er-x_firmware | 2.0.9:hotfix6 |
| ui | er-x-sfp_firmware | 𝑥 < 2.0.9 |
| ui | er-x-sfp_firmware | 2.0.9 |
| ui | er-x-sfp_firmware | 2.0.9:hotfix2 |
| ui | er-x-sfp_firmware | 2.0.9:hotfix3 |
| ui | er-x-sfp_firmware | 2.0.9:hotfix4 |
| ui | er-x-sfp_firmware | 2.0.9:hotfix5 |
| ui | er-x-sfp_firmware | 2.0.9:hotfix6 |
𝑥
= Vulnerable software versions