CVE-2023-2374
CVE-2023-2374: 1 tracked advisory record across Ubiquiti. Compare vendor sources.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Ubiquiti
1 advisory- Advisory severityHigh7.2
High [CVE-2023-2374] EdgeRouter: security flaw has been discovered in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6.
CVE-2023-2374Source published Source updated
A security flaw has been discovered in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This issue affects some unknown processing of the component Web Management Interface. Performing a manipulation of the argument ecn-down results in command injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The existence of this vulnerability is still disputed at present. The vendor position is that post-authentication issues are not accepted as vulnerabilities.
- Related products — impact not confirmed
- EdgeRouter
- Ubiquiti
- Source-reported affected versions
- 2.0.9
- Source-reported fixed versions
- No fixed-version detail extracted. This does not mean no fix exists.
- Mitigation guidance
- No mitigation guidance extracted; consult the source.
Android app · Google Play
Monitor future Ubiquiti CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.