Command Injection Vulnerability in UniFi Access Points and Switches by Ubiquiti
CVE-2023-38034

8.3HIGH

Key Information:

Vendor

Ubiquiti Inc

Status
Unifi Access Points
Unifi Switches
Vendor
CVE Published:
10 August 2023

What is CVE-2023-38034?

A command injection vulnerability exists in the DHCP Client functionality of Ubiquiti's UniFi Access Points and Switches. This flaw, which affects all devices running specific versions prior to the latest updates, may allow an attacker to execute arbitrary code remotely, posing significant security risks to network integrity. It is crucial for users to promptly update their devices to mitigate these risks: UniFi Access Points should be updated to Version 6.5.62 or later, while UniFi Switches require an update to Version 6.5.59 or later.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

UniFi Access Points 6.5.53

UniFi Switches 6.5.32

References

https://community.ui.com/releases/Security-Advisory-Bulle...

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.