Integer Overflow Vulnerability in UniFi Access Points and Switches by Ubiquiti
CVE-2023-35085

9CRITICAL

Key Information:

Vendor

Ubiquiti Inc

Status
Unifi Access Points
Unifi Switches
Vendor
CVE Published:
10 August 2023

What is CVE-2023-35085?

An integer overflow vulnerability has been discovered in Ubiquiti's UniFi Access Points and Switches, except for the Flex Mini model. When SNMP Monitoring is enabled and default settings are configured, this flaw may allow an attacker to execute arbitrary code remotely. Users are strongly advised to upgrade their devices to secure versions in order to mitigate potential exploits.

Affected Version(s)

UniFi Access Points 6.5.50

UniFi Switches 6.5.32

References

https://community.ui.com/releases/Security-Advisory-Bulle...

EPSS Score

5% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.