PT-2023-21675 · Ubiquiti · Unifi

CVE-2023-28365

·

Published

2023-06-30

·

Updated

2024-12-12

CVSS v3.1

9.1

Critical

VectorAV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions UniFi versions 7.3.83 and earlier
Description A backup file vulnerability found in UniFi applications running on Linux operating systems allows application administrators to execute malicious commands on the host device being restored.
Recommendations For UniFi versions 7.3.83 and earlier, update to a version later than 7.3.83 to resolve the issue. As a temporary workaround, consider restricting access to backup files to minimize the risk of exploitation.

Fix

Command Injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2023-28365

Affected Products

Unifi