CVE-2023-1456: Command Injection
First published: Sat Mar 25 2023(Updated: )
A vulnerability, which was classified as critical, has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6. This issue affects some unknown processing of the component NAT Configuration Handler. The manipulation leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The identifier VDB-223301 was assigned to this vulnerability. NOTE: The vendor position is that post-authentication issues are not accepted as vulnerabilities.
Credit: cna@vuldb.com cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Ubiquiti EdgeRouter X | =2.0.9-hotfix6 | |
| ui EdgeRouter X firmware | ||
| Ubiquiti EdgeRouter X | =2.0.9-hotfix6 | |
| ui EdgeRouter X firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2023-1456?
CVE-2023-1456 is a critical vulnerability found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6 that allows remote attackers to execute arbitrary commands via command injection.
What is the severity of CVE-2023-1456?
The severity of CVE-2023-1456 is rated as critical with a score of 9.8.
How does CVE-2023-1456 affect Ubiquiti EdgeRouter X?
CVE-2023-1456 affects the NAT Configuration Handler component of Ubiquiti EdgeRouter X, allowing remote attackers to execute arbitrary commands via command injection.
How can I check if my Ubiquiti EdgeRouter X is affected by CVE-2023-1456?
To check if your Ubiquiti EdgeRouter X is affected, make sure you are running firmware version 2.0.9-hotfix.6 and verify if the NAT Configuration Handler component is vulnerable.
How can I fix CVE-2023-1456 vulnerability on my Ubiquiti EdgeRouter X?
To fix the CVE-2023-1456 vulnerability, update your Ubiquiti EdgeRouter X firmware to a version that includes the necessary security patches for this issue.
- agent/references
- agent/type
- agent/weakness
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/first-publish-date
- agent/event
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/ui
- canonical/ubiquiti edgerouter x
- version/ubiquiti edgerouter x/2.0.9-hotfix6
- canonical/ui edgerouter x firmware