Lucene search

K
nvd[email protected]NVD:CVE-2023-2379
HistoryApr 28, 2023 - 5:15 p.m.

CVE-2023-2379

2023-04-2817:15:43
CWE-404
web.nvd.nist.gov
2
ubiquiti
edgerouter x
web service
denial of service
remote attack
vulnerability
vdb-227655

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

31.7%

A vulnerability classified as critical has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This affects an unknown part of the component Web Service. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227655.

Affected configurations

NVD
Node
uier-x_firmwareRange<2.0.9
OR
uier-x_firmwareMatch2.0.9-
OR
uier-x_firmwareMatch2.0.9hotfix2
OR
uier-x_firmwareMatch2.0.9hotfix3
OR
uier-x_firmwareMatch2.0.9hotfix4
OR
uier-x_firmwareMatch2.0.9hotfix5
OR
uier-x_firmwareMatch2.0.9hotfix6
AND
uier-xMatch-
Node
uier-x-sfp_firmwareRange<2.0.9
OR
uier-x-sfp_firmwareMatch2.0.9-
OR
uier-x-sfp_firmwareMatch2.0.9hotfix2
OR
uier-x-sfp_firmwareMatch2.0.9hotfix3
OR
uier-x-sfp_firmwareMatch2.0.9hotfix4
OR
uier-x-sfp_firmwareMatch2.0.9hotfix5
OR
uier-x-sfp_firmwareMatch2.0.9hotfix6
AND
uier-x-sfpMatch-

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

31.7%

Related for NVD:CVE-2023-2379