CVE-2023-1456

CVE-2023-1456 affects Ubiquiti EdgeRouter X firmware 2.0.9-hotfix.6. The root cause is insufficient input validation in the NAT Configuration Handler, enabling remote command injection. Several sources confirm a remote exploit possibility; exploitation status is not uniformly characterized, but P...

CVE-2023-1457

CVE-2023-1457 affects Ubiquiti EdgeRouter X 2.0.9-hotfix.6. The vulnerability is in the Static Routing Configuration Handler, where manipulating the next-hop-interface argument leads to command injection. It can be exploited remotely; some sources note the public exploit and dispute the vulnerabi...

CVE-2023-1458

CVE-2023-1458 concerns Ubiquiti EdgeRouter X (2.0.9-hotfix.6). The issue resides in the OSPF Handler component, where manipulation of the argument area can cause remote command injection. Multiple sources confirm the vulnerability exists for EdgeRouter X and that exploitation could be remote, wit...