CVE-2023-28365

CRITICAL

ui unifi_network_application Improper Neutralization of Special Elements used in a Command ('Command Injection')

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2023-28365 has a selected CVSS score of 9.1 (critical).

Description

A backup file vulnerability found in UniFi applications (Version 7.3.83 and earlier) running on Linux operating systems allows application administrators to execute malicious commands on the host device being restored.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Sep 18, 2024 · VulnCheck
Reported exploitation
Observed · VulnCheck

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Nov 27, 2024 · Source: CVE List

Affected products and versions

3
ProductSourceVersion range

UniFi Network application

Browse Ubiquiti Inc. / UniFi Network application

Default status: unaffected

CVE List7.3.83 to ≤ 7.3.83affected

unifi_network_application

Browse ubiquiti / unifi_network_application

Default status: unaffected

CVE ListThrough 7.3.83affected

unifi_network_application

Browse ui / unifi_network_application
VulnCheckVersion data not supplied

References

2