Ubiquiti UniFi up to 7.3.83 on Linux Backup File command injection

Summaryinfo

A vulnerability was found in Ubiquiti UniFi up to 7.3.83 on Linux. It has been classified as problematic. Affected by this issue is some unknown functionality of the component Backup File Handler. This manipulation causes an unknown weakness. This vulnerability appears as CVE-2023-28365. There is no available exploit. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability was found in Ubiquiti UniFi up to 7.3.83 on Linux. It has been declared as problematic. Affected by this vulnerability is an unknown code block of the component Backup File Handler. The CWE definition for the vulnerability is CWE-77. The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

A backup file vulnerability found in UniFi applications (Version 7.3.83 and earlier) running on Linux operating systems allows application administrators to execute malicious commands on the host device being restored.

The weakness was presented 07/01/2023. It is possible to read the advisory at community.ui.com. This vulnerability is known as CVE-2023-28365 since 03/15/2023. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1202 according to MITRE ATT&CK.

Upgrading eliminates this vulnerability. The upgrade is hosted for download at community.ui.com.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• Ubiquiti

Name

• UniFi

Version

• 7.3.0
• 7.3.1
• 7.3.2
• 7.3.3
• 7.3.4
• 7.3.5
• 7.3.6
• 7.3.7
• 7.3.8
• 7.3.9
• 7.3.10
• 7.3.11
• 7.3.12
• 7.3.13
• 7.3.14
• 7.3.15
• 7.3.16
• 7.3.17
• 7.3.18
• 7.3.19
• 7.3.20
• 7.3.21
• 7.3.22
• 7.3.23
• 7.3.24
• 7.3.25
• 7.3.26
• 7.3.27
• 7.3.28
• 7.3.29
• 7.3.30
• 7.3.31
• 7.3.32
• 7.3.33
• 7.3.34
• 7.3.35
• 7.3.36
• 7.3.37
• 7.3.38
• 7.3.39
• 7.3.40
• 7.3.41
• 7.3.42
• 7.3.43
• 7.3.44
• 7.3.45
• 7.3.46
• 7.3.47
• 7.3.48
• 7.3.49
• 7.3.50
• 7.3.51
• 7.3.52
• 7.3.53
• 7.3.54
• 7.3.55
• 7.3.56
• 7.3.57
• 7.3.58
• 7.3.59
• 7.3.60
• 7.3.61
• 7.3.62
• 7.3.63
• 7.3.64
• 7.3.65
• 7.3.66
• 7.3.67
• 7.3.68
• 7.3.69
• 7.3.70
• 7.3.71
• 7.3.72
• 7.3.73
• 7.3.74
• 7.3.75
• 7.3.76
• 7.3.77
• 7.3.78
• 7.3.79
• 7.3.80
• 7.3.81
• 7.3.82
• 7.3.83

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion