CVE-2023-23912

🗓️ 09 Feb 2023 00:00:00Reported by hackeroneType

CVE-2023-23912 vulnerability in EdgeRouters & UniFi Security Gateways for DHCPv6 prefix delegation

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2023-23912	9 Feb 202322:26	–	circl
CNNVD	Ubiquiti EdgeRouters 代码注入漏洞	9 Feb 202300:00	–	cnnvd
Cvelist	CVE-2023-23912	9 Feb 202300:00	–	cvelist
EUVD	EUVD-2023-27995	3 Oct 202520:07	–	euvd
NVD	CVE-2023-23912	9 Feb 202320:15	–	nvd
Prion	Remote code execution	9 Feb 202320:15	–	prion
RedhatCVE	CVE-2023-23912	23 May 202503:19	–	redhatcve
Vulnrichment	CVE-2023-23912	9 Feb 202300:00	–	vulnrichment
Zero Day Initiative	(Pwn2Own) Ubiquiti Networks EdgeOS dhcp6c Command Injection Remote Code Execution Vulnerability	9 Feb 202300:00	–	zdi

NVD

Node

ui usg_firmwareRange<4.4.57

AND

ui usgMatch-

Node

ui usg-pro-4_firmwareRange<4.4.57

AND

ui usg-pro-4Match-

Node

ui er-10x_firmwareRange<2.0.9

ui er-10x_firmwareMatch2.0.9-

ui er-10x_firmwareMatch2.0.9hotfix2

ui er-10x_firmwareMatch2.0.9hotfix4

ui er-10x_firmwareMatch2.0.9hotfix5

AND

ui er-10xMatch-

Node

ui er-12_firmwareRange<2.0.9

ui er-12_firmwareMatch2.0.9-

ui er-12_firmwareMatch2.0.9hotfix2

ui er-12_firmwareMatch2.0.9hotfix4

ui er-12_firmwareMatch2.0.9hotfix5

AND

ui er-12Match-

Node

ui er-12p_firmwareRange<2.0.9

ui er-12p_firmwareMatch2.0.9-

ui er-12p_firmwareMatch2.0.9hotfix2

ui er-12p_firmwareMatch2.0.9hotfix4

ui er-12p_firmwareMatch2.0.9hotfix5

AND

ui er-12pMatch-

Node

ui er-4_firmwareRange<2.0.9

ui er-4_firmwareMatch2.0.9-

ui er-4_firmwareMatch2.0.9hotfix2

ui er-4_firmwareMatch2.0.9hotfix4

ui er-4_firmwareMatch2.0.9hotfix5

AND

ui er-4Match-

Node

ui er-6p_firmwareRange<2.0.9

ui er-6p_firmwareMatch2.0.9-

ui er-6p_firmwareMatch2.0.9hotfix2

ui er-6p_firmwareMatch2.0.9hotfix4

ui er-6p_firmwareMatch2.0.9hotfix5

AND

ui er-6pMatch-

Node

ui er-8-xg_firmwareRange<2.0.9

ui er-8-xg_firmwareMatch2.0.9-

ui er-8-xg_firmwareMatch2.0.9hotfix2

ui er-8-xg_firmwareMatch2.0.9hotfix4

ui er-8-xg_firmwareMatch2.0.9hotfix5

AND

ui er-8-xgMatch-

Node

ui er-x_firmwareRange<2.0.9

ui er-x_firmwareMatch2.0.9-

ui er-x_firmwareMatch2.0.9hotfix2

ui er-x_firmwareMatch2.0.9hotfix4

ui er-x_firmwareMatch2.0.9hotfix5

AND

ui er-xMatch-

Node

ui er-x-sfp_firmwareRange<2.0.9

ui er-x-sfp_firmwareMatch2.0.9-

ui er-x-sfp_firmwareMatch2.0.9hotfix2

ui er-x-sfp_firmwareMatch2.0.9hotfix4

ui er-x-sfp_firmwareMatch2.0.9hotfix5

AND

ui er-x-sfpMatch-

[
  {
    "vendor": "n/a",
    "product": "Ubiquiti EdgeRouter(s) and USG(s)",
    "versions": [
      {
        "version": "EdgeRouter(s) Version 2.0.9-hotfix.6 or later and USG(s) to Version 4.4.57 or later",
        "status": "affected"
      }
    ]
  }
]

Source	Link
community	www.community.ui.com/releases/Security-Advisory-Bulletin-028-028/696e4e3b-718c-4da4-9a21-965a85633b5f

24 Mar 2025 19:15Current

8.9High risk

Vulners AI Score8.9

CVSS 3.18.8

EPSS0.01322

SSVC