Command Injection Vulnerability in UniFi Access Points and Switches by Ubiquiti

CVE-2023-38034

What is CVE-2023-38034?

A command injection vulnerability exists in the DHCP Client functionality of Ubiquiti's UniFi Access Points and Switches. This flaw, which affects all devices running specific versions prior to the latest updates, may allow an attacker to execute arbitrary code remotely, posing significant security risks to network integrity. It is crucial for users to promptly update their devices to mitigate these risks: UniFi Access Points should be updated to Version 6.5.62 or later, while UniFi Switches require an update to Version 6.5.59 or later.

References