A vulnerability described as critical has been identified in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. The impacted element is an unknown function of the component Web Management Interface. The manipulation of the argument Name results in command injection.
This vulnerability is reported as CVE-2023-2377. The attack can be launched remotely. Moreover, an exploit is present.
There is ongoing doubt regarding the real existence of this vulnerability.
The vendor position is that post-authentication issues are not accepted as vulnerabilities.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2023-2377 | Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6 Web Management Interface Name command injection
A vulnerability described as critical has been identified in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. The impacted element is an unknown function of the component Web Management Interface. The manipulation of the argument Name results…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR