Ubiquiti UniFi Access Points und Switches: Mehrere Schwachstellen ermöglichen Codeausführung

Summary

Product

Vulnerabilities 2

• Critical 9.0
  CVE-2023-35085 Public exploit

  An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Mo…

  Ubiquiti UniFi Switches UniFi Access Points Network devices
  Aug 10, 2023
• High 8.3
  CVE-2023-38034

  A command injection vulnerability in the DHCP Client function of all UniFi Access Points and Switches, excluding the Sw…

  Ubiquiti UniFi Access Points UniFi Switches Network devices
  Aug 10, 2023

Revision history

1. 2023-08-17 #1

   Initiale Fassung

References

• Ubiquiti Security Advisory vom 2023-08-09
  https://community.ui.com/releases/Security-Advisory-Bulletin-035-035/91107858-9884-44df-b1c6-63c6499f6e56