HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2023-23912

CVSS 8.8v3.1pub. 2023-02-09upd. 2025-03-24

A vulnerability, found in EdgeRouters Version 2.0.9-hotfix.5 and earlier and UniFi Security Gateways (USG) Version 4.4.56 and earlier with their DHCPv6 prefix delegation set to dhcpv6-stateless or dhcpv6-stateful, allows a malicious actor directly connected to the WAN interface of an affected device to create a remote code execution vulnerability.

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Ui Er 10x

    HW
    Ui
    all versions

  • Ui Er 10x Firmware

    OS
    Ui
    2.0.9< 2.0.9

  • Ui Er 12

    HW
    Ui
    all versions

  • Ui Er 12 Firmware

    OS
    Ui
    2.0.9< 2.0.9

  • Ui Er 12p

    HW
    Ui
    all versions

  • Ui Er 12p Firmware

    OS
    Ui
    2.0.9< 2.0.9

  • Ui Er 4

    HW
    Ui
    all versions

  • Ui Er 4 Firmware

    OS
    Ui
    2.0.9< 2.0.9

  • Ui Er 6p

    HW
    Ui
    all versions

  • Ui Er 6p Firmware

    OS
    Ui
    2.0.9< 2.0.9

  • Ui Er 8 Xg

    HW
    Ui
    all versions

  • Ui Er 8 Xg Firmware

    OS
    Ui
    2.0.9< 2.0.9

  • Ui Er X

    HW
    Ui
    all versions

  • Ui Er X Firmware

    OS
    Ui
    2.0.9< 2.0.9

  • Ui Er X Sfp

    HW
    Ui
    all versions

  • Ui Er X Sfp Firmware

    OS
    Ui
    2.0.9< 2.0.9

  • Ui Usg

    HW
    Ui
    all versions

  • Ui Usg Firmware

    OS
    Ui
    < 4.4.57

  • Ui Usg Pro 4

    HW
    Ui
    all versions

  • Ui Usg Pro 4 Firmware

    OS
    Ui
    < 4.4.57
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2023-2379HIGH7.5same product

A vulnerability classified as critical has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This affe...

CVE-2023-2373HIGH7.3same product

A vulnerability was identified in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This vulnerability affects unkno...

CVE-2023-2374HIGH7.3same product

A security flaw has been discovered in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This issue affects some unk...

CVE-2023-2375HIGH7.3same product

A weakness has been identified in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. Impacted is an unknown function ...

CVE-2023-2376HIGH7.3same product

A security vulnerability has been detected in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. The affected element...