Paper/Archive/CVE-2023-28365

CVE-2023-28365

Ubiquiti Inc. UniFi Network application — A backup file vulnerability found in UniFi applications (Version 7.3.83 and earlier) running on Linux operating systems allows applicatio…

EPSS 0.9%CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (NVD)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 59.2.592 × 2011.8 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A backup file vulnerability found in UniFi applications (Version 7.3.83 and earlier) running on Linux operating systems allows application administrators to execute malicious commands on the host device being restored.

Affected

ProductAffectedFixed inSource

UniFi Network application7.3.83 – 7.3.83–CNA

unifi_network_application≤ 7.3.83–CISA-ADP

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refcommunity.ui.com/releases/Security-Advisory-Bulletin-031-031/8c85fc64-e9a8-4082-9ec4-56b14effd545