CVE-2023-2375 in EdgeRouter Xالمعلومات

الملخص

بحسب MITRE • 28/04/2023

A weakness has been identified in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. Impacted is an unknown function of the component Web Management Interface. Executing a manipulation of the argument src can lead to command injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The presence of this vulnerability remains uncertain at this time. The vendor position is that post-authentication issues are not accepted as vulnerabilities.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

مسؤول

VulDB

حجز

28/04/2023

إفشاء

28/04/2023

الاعتدال

تمت الموافقة

إدخال

VDB-227651

استغلال

تحميل

EPSS

0.09201

KEV

لا

النشاطات

منخفض جدًا

المصادر

Do you need the next level of professionalism?

Upgrade your account now!