mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-07-29 05:56:59 +00:00
129 lines
5.1 KiB
JSON
129 lines
5.1 KiB
JSON
{
|
|
"data_version": "4.0",
|
|
"data_type": "CVE",
|
|
"data_format": "MITRE",
|
|
"CVE_data_meta": {
|
|
"ID": "CVE-2023-2376",
|
|
"ASSIGNER": "cna@vuldb.com",
|
|
"STATE": "PUBLIC"
|
|
},
|
|
"description": {
|
|
"description_data": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "A vulnerability was found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. It has been classified as critical. Affected is an unknown function of the component Web Management Interface. The manipulation of the argument dpi leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-227652."
|
|
},
|
|
{
|
|
"lang": "deu",
|
|
"value": "Es wurde eine kritische Schwachstelle in Ubiquiti EdgeRouter X bis 2.0.9-hotfix.6 ausgemacht. Es geht dabei um eine nicht klar definierte Funktion der Komponente Web Management Interface. Durch das Manipulieren des Arguments dpi mit unbekannten Daten kann eine command injection-Schwachstelle ausgenutzt werden. Der Angriff kann \u00fcber das Netzwerk passieren. Der Exploit steht zur \u00f6ffentlichen Verf\u00fcgung."
|
|
}
|
|
]
|
|
},
|
|
"problemtype": {
|
|
"problemtype_data": [
|
|
{
|
|
"description": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "CWE-77 Command Injection",
|
|
"cweId": "CWE-77"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"affects": {
|
|
"vendor": {
|
|
"vendor_data": [
|
|
{
|
|
"vendor_name": "Ubiquiti",
|
|
"product": {
|
|
"product_data": [
|
|
{
|
|
"product_name": "EdgeRouter X",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "2.0.9-hotfix.0"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "2.0.9-hotfix.1"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "2.0.9-hotfix.2"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "2.0.9-hotfix.3"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "2.0.9-hotfix.4"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "2.0.9-hotfix.5"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": "2.0.9-hotfix.6"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"references": {
|
|
"reference_data": [
|
|
{
|
|
"url": "https://vuldb.com/?id.227652",
|
|
"refsource": "MISC",
|
|
"name": "https://vuldb.com/?id.227652"
|
|
},
|
|
{
|
|
"url": "https://vuldb.com/?ctiid.227652",
|
|
"refsource": "MISC",
|
|
"name": "https://vuldb.com/?ctiid.227652"
|
|
},
|
|
{
|
|
"url": "https://github.com/leetsun/IoT/tree/main/EdgeRouterX/CI/8",
|
|
"refsource": "MISC",
|
|
"name": "https://github.com/leetsun/IoT/tree/main/EdgeRouterX/CI/8"
|
|
}
|
|
]
|
|
},
|
|
"credits": [
|
|
{
|
|
"lang": "en",
|
|
"value": "leetmoon (VulDB User)"
|
|
}
|
|
],
|
|
"impact": {
|
|
"cvss": [
|
|
{
|
|
"version": "3.1",
|
|
"baseScore": 6.3,
|
|
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
|
|
"baseSeverity": "MEDIUM"
|
|
},
|
|
{
|
|
"version": "3.0",
|
|
"baseScore": 6.3,
|
|
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
|
|
"baseSeverity": "MEDIUM"
|
|
},
|
|
{
|
|
"version": "2.0",
|
|
"baseScore": 6.5,
|
|
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P"
|
|
}
|
|
]
|
|
}
|
|
} |