CVE-2017-0913: Medium severity ui ucrm vulnerability
Published Jul 3, 2018
·Updated
Ubiquiti UCRM versions 2.3.0 to 2.7.7 allow an authenticated user to read arbitrary files in the local file system. Note that by default, the local file system is isolated in a docker container. Successful exploitation requires valid credentials to an account with "Edit" access to "System Customization".
Affected Software
1 affected component
Ubnt Ucrm>=2.3.0<=2.7.7
Event History
Jul 3, 2018
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this Ubiquiti UCRM vulnerability?
The vulnerability ID of this Ubiquiti UCRM vulnerability is CVE-2017-0913.
2
What is the severity of CVE-2017-0913?
The severity of CVE-2017-0913 is medium with a CVSS score of 4.7.
3
Which version of Ubiquiti UCRM is affected by CVE-2017-0913?
Ubiquiti UCRM versions 2.3.0 to 2.7.7 are affected by CVE-2017-0913.
4
What can an authenticated user do in exploit CVE-2017-0913?
An authenticated user can read arbitrary files in the local file system.
5
What are the required conditions for successful exploitation of CVE-2017-0913?
Successful exploitation of CVE-2017-0913 requires valid credentials to an account with "Edit" access to "System Customizat…