CVE-2023-38034

🗓️ 10 Aug 2023 19:15:09Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 12 Views

Command injection vulnerability in UniFi Access Points and Switches

Reporter	Title	Published	Views	Family All 7
CNNVD	Ubiquiti UniFi Command Injection Vulnerability	10 Aug 202300:00	–	cnnvd
CVE	CVE-2023-38034	10 Aug 202318:58	–	cve
Cvelist	CVE-2023-38034	10 Aug 202318:58	–	cvelist
EUVD	EUVD-2023-41861	3 Oct 202520:07	–	euvd
OSV	CVE-2023-38034	10 Aug 202319:15	–	osv
Prion	Command injection	10 Aug 202319:15	–	prion
Vulnrichment	CVE-2023-38034	10 Aug 202318:58	–	vulnrichment

NVD

Node

ui unifi_uap_firmwareRange≤6.5.53

AND

ui u6+Match-

OR

ui u6-enterpriseMatch-

OR

ui u6-enterprise-iwMatch-

OR

ui u6-extenderMatch-

OR

ui u6-iwMatch-

OR

ui u6-liteMatch-

OR

ui u6-lrMatch-

OR

ui u6-meshMatch-

OR

ui u6-proMatch-

OR

ui uap-ac-iwMatch-

OR

ui uap-ac-liteMatch-

OR

ui uap-ac-lrMatch-

OR

ui uap-ac-mMatch-

OR

ui uap-ac-m-proMatch-

OR

ui uap-ac-proMatch-

OR

ui ubbMatch-

OR

ui ubb-xgMatch-

OR

ui uwb-xgMatch-

Node

ui unifi_switch_firmwareRange≤6.5.32

AND

ui us-16-150wMatch-

OR

ui us-24-250wMatch-

OR

ui us-48-500wMatch-

OR

ui us-8-150wMatch-

OR

ui us-8-60wMatch-

OR

ui us-xg-6poeMatch-

OR

ui usw-16-poeMatch-

OR

ui usw-24Match-

OR

ui usw-24-poeMatch-

OR

ui usw-48Match-

OR

ui usw-48-poeMatch-

OR

ui usw-aggregationMatch-

OR

ui usw-enterprise-24-poeMatch-

OR

ui usw-enterprise-48-poeMatch-

OR

ui usw-enterprise-8-poeMatch-

OR

ui usw-enterprisexg-24Match-

OR

ui usw-flexMatch-

OR

ui usw-flex-xgMatch-

OR

ui usw-industrialMatch-

OR

ui usw-lite-16-poeMatch-

OR

ui usw-lite-8-poeMatch-

OR

ui usw-mission-criticalMatch-

OR

ui usw-pro-24Match-

OR

ui usw-pro-24-poeMatch-

OR

ui usw-pro-48Match-

OR

ui usw-pro-48-poeMatch-

OR

ui usw-pro-aggregationMatch-

Source	Link
community	www.community.ui.com/releases/Security-Advisory-Bulletin-035-035/91107858-9884-44df-b1c6-63c6499f6e56

17 Jun 2026 06:09Current

9.3High risk

Vulners AI Score9.3

CVSS 3.19.8

CVSS 38.3

EPSS0.01021

cve-2023-38034 dhcp client remote code execution affected products mitigation unifi