CVE-2023-2378 | Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6 Web Management Interface suffix-rate-up command injection

A vulnerability classified as critical has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This affects an unknown function of the component Web Management Interface. This manipulation of the argument suffix-rate-up causes command injection.

This vulnerability appears as CVE-2023-2378. The attack may be initiated remotely. In addition, an exploit is available.

The real existence of this vulnerability is still doubted at the moment.

The vendor position is that post-authentication issues are not accepted as vulnerabilities.