Lucene search

CVE-2023-31997

🗓️ 01 Jul 2023 00:10:15Reported by hackeroneType

UniFi OS 3.1 misconfig allows local network access to MongoDB

Reporter	Title	Published	Views	Family All 4
Cvelist	CVE-2023-31997	30 Jun 202323:39	–	cvelist
Vulnrichment	CVE-2023-31997	30 Jun 202323:39	–	vulnrichment
Prion	Code injection	1 Jul 202300:15	–	prion
NVD	CVE-2023-31997	1 Jul 202300:15	–	nvd

Nvd

Vulners

Vulnrichment

Node

ui unifi_osMatch3.1

AND

ui cloud_key_gen2Match-

ui cloud_key_gen2_plusMatch-

[
  {
    "defaultStatus": "unaffected",
    "vendor": "Ubiquiti Inc.",
    "product": "UniFi OS",
    "versions": [
      {
        "version": "3.1.13",
        "status": "affected",
        "lessThanOrEqual": "3.1.13",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
community	www.community.ui.com/releases/Security-Advisory-Bulletin-032-032/e57301f4-4f5e-4d9f-90bc-71f1923ed7a4

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Jul 2023 00:15Current

8.7High risk

Vulners AI Score8.7

CVSS39

EPSS0.00075

SSVC

CWE-863