PT-2023-7474 · Ubiquiti · Ubiquiti Edgerouter X

Leetmoon · Publicado 2023-03-25 · Atualizado 2024-08-02 · CVE-2023-1458

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ubiquiti EdgeRouter X version 2.0.9-hotfix.6

Description A critical issue has been found in the OSPF Handler component of the software, potentially allowing for command injection through the manipulation of the argument area. This can be exploited remotely. The existence of this issue is still uncertain.

Recommendations For version 2.0.9-hotfix.6, consider restricting access to the OSPF Handler component until a fix is available. As a temporary workaround, avoid using the argument area in the OSPF Handler component to minimize the risk of exploitation.

Exploit

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

BDU:2023-08518

CVE-2023-1458

Produtos afetados

Ubiquiti Edgerouter X

Referências · 9

• 🔥 https://vuldb.com/?id.223303 · Exploit
• https://vuldb.com/?ctiid.223303 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-1458 · Nota de Segurança
• https://github.com/advisories/GHSA-rww4-35wv-xmr3 · Nota
• https://t.me/cvenotify/46870 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-1458 · Aviso do Fabricante
• https://t.me/cvenotify/88457 · Publicação no Telegram
• https://twitter.com/underlinux/status/1695217324469391544 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2023-08518 · Nota de Segurança