PT-2023-23565 · Ubiquiti · Unifi Network

Published 2023-07-07 · Updated 2023-07-13 · CVE-2023-32000

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions UniFi Network versions 7.3.83 and earlier

Description A Cross-Site Scripting (XSS) issue allows a malicious actor with Site Administrator credentials to escalate privileges by persuading an Administrator to visit a malicious web page.

Recommendations For UniFi Network versions 7.3.83 and earlier, update to a version later than 7.3.83 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-32000

Affected Products

Unifi Network

References · 4

• https://osv.dev/vulnerability/CVE-2023-32000 · Vendor Advisory
• https://community.ui.com/releases/Security-Advisory-Bulletin-034-034/53cfcb84-b42b-4f8f-afbf-07c0ca7cabe2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-32000 · Security Note
• https://t.me/cibsecurity/66236 · Telegram Post