Backup File Vulnerability in UniFi Applications by Ubiquiti
CVE-2023-28365

9.1CRITICAL

Key Information:

Vendor

Ubiquiti Inc.

Status
Unifi Network Application
Vendor
CVE Published:
1 July 2023

What is CVE-2023-28365?

A vulnerability in the backup file functionality of UniFi applications (up to Version 7.3.83) on Linux systems enables application administrators to execute unauthorized commands during device restoration. This flaw poses significant risks as it can lead to unintended alterations or compromises of the host device, allowing potential exploitation by malicious actors.

Affected Version(s)

UniFi Network application 7.3.83

References

https://community.ui.com/releases/Security-Advisory-Bulle...

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.