Command Injection Vulnerability in Ubiquiti EdgeRouter X by Ubiquiti

CVE-2023-1458

What is CVE-2023-1458?

A command injection vulnerability exists in Ubiquiti EdgeRouter X 2.0.9-hotfix.6, specifically within the OSPF Handler component. An attacker can remotely manipulate the 'area' argument, leading to potential unauthorized command execution. While the specific existence of this vulnerability remains debated, the exploit candidates have been disclosed publicly, raising concerns for network security administrators.

References