CVE-2023-23912 - A vulnerability, found in EdgeRouters Version 2.0.9-hotfix.5 and earlier and UniFi Security Gateways (USG) Version 4.4.56 and earlier with their DHCPv6 prefix delegation set to dhcpv6-stateless or dhcpv6-stateful, allows a malicious actor directly connected to the WAN interface of an affected device to create a remote code execution vulnerability

Back Back to CVE browser

HIGH

A vulnerability, found in EdgeRouters Version 2.0.9-hotfix.5 and earlier and UniFi Security Gateways (USG) Version 4.4.56 and earlier with their DHCPv6 prefix delegation set to dhcpv6-stateless or dhcpv6-stateful, allows a malicious actor directly connected to the WAN interface of an affected device to create a remote code execution vulnerability

Published Feb 9, 2023

8.8

HIGH

CVSS 3.1

EPSS 0.96%

Description

A vulnerability, found in EdgeRouters Version 2.0.9-hotfix.5 and earlier and UniFi Security Gateways (USG) Version 4.4.56 and earlier with their DHCPv6 prefix delegation set to dhcpv6-stateless or dhcpv6-stateful, allows a malicious actor directly connected to the WAN interface of an affected device to create a remote code execution vulnerability.

Affected products

Vendor n/a Product Ubiquiti EdgeRouter(s) and USG(s) Default
n/a
- Version
  EdgeRouter(s) Version 2.0.9-hotfix.6 or later and USG(s) to Version 4.4.57 or later
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Ubiquiti EdgeRouter(s) and USG(s)

n/a

Version	Status	Constraints
EdgeRouter(s) Version 2.0.9-hotfix.6 or later and USG(s) to Version 4.4.57 or later	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-75

CWE-94

Code Injection

References (2)

https://community.ui.com/releases/Security-Advisory-Bulletin-028-028/696e4e3b-718c-4da4-9a21-965a85633b5f
ExploitPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-27995
Advisory

Link	Providers	Tags
https://community.ui.com/releases/Security-Advisory-Bulletin-028-028/696e4e3b-718c-4da4-9a21-965a85633b5f		ExploitPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-27995		Advisory