CVE-2023-2375

MEDIUM

Ubiquiti EdgeRouter X <2.0.9-hotfix.6 - Command Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2023-2375. PoCs published by 0x0jr.

AI-analyzed exploit summary This repository contains a functional Python exploit for CVE-2023-23752, an unauthenticated information disclosure vulnerability in Joomla! 4.2.8. The exploit queries the `/api/index.php/v1/config/application?public=true` endpoint to extract sensitive credentials from the JSON response.

Description

A vulnerability was found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6 and classified as critical. This issue affects some unknown processing of the component Web Management Interface. The manipulation of the argument src leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227651.

Exploits (1)

nomisec WORKING POC
by 0x0jr · poc
https://github.com/0x0jr/HTB-Devvortex-CVE-2023-2375-PoC

This repository contains a functional Python exploit for CVE-2023-23752, an unauthenticated information disclosure vulnerability in Joomla! 4.2.8. The exploit queries the `/api/index.php/v1/config/application?public=true` endpoint to extract sensitive credentials from the JSON response.

Classification
Working Poc 95%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Joomla! 4.2.8
No auth needed
Prerequisites: Target Joomla! instance running version 4.2.8 · Network access to the target
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (3)

Core 3
Core References
Third Party Advisory vdb-entry technical-description
https://vuldb.com/?id.227651
Permissions Required, Third Party Advisory signature permissions-required
https://vuldb.com/?ctiid.227651
Exploit, Third Party Advisory broken-link exploit
https://github.com/leetsun/IoT/tree/main/EdgeRouterX/CI/7

Scores

CVSS v3 6.3
EPSS 0.0657
EPSS Percentile 93.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Details

CWE
CWE-77
Status published
Products (4)
ui/er-x-sfp_firmware 2.0.9 (6 CPE variants)
ui/er-x-sfp_firmware < 2.0.9
ui/er-x_firmware 2.0.9 (6 CPE variants)
ui/er-x_firmware < 2.0.9
Published Apr 28, 2023
Tracked Since Feb 18, 2026