CVE-2023-1457: Command Injection
First published: Sat Mar 25 2023(Updated: )
** DISPUTED ** A vulnerability, which was classified as critical, was found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6. Affected is an unknown function of the component Static Routing Configuration Handler. The manipulation of the argument next-hop-interface leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. VDB-223302 is the identifier assigned to this vulnerability. NOTE: The vendor position is that post-authentication issues are not accepted as vulnerabilities.
Credit: cna@vuldb.com cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ui Edgerouter X Firmware | =2.0.9-hotfix6 | |
| Ui Edgerouter X | ||
| All of | ||
| =2.0.9-hotfix6 | ||
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-1457?
The severity of CVE-2023-1457 is critical, with a severity value of 9.8.
What is the affected software for CVE-2023-1457?
The affected software for CVE-2023-1457 is Ubiquiti EdgeRouter X firmware version 2.0.9-hotfix6.
What is the vulnerability type of CVE-2023-1457?
The vulnerability type of CVE-2023-1457 is command injection.
Is Ubiquiti EdgeRouter X vulnerable to CVE-2023-1457?
Yes, Ubiquiti EdgeRouter X firmware version 2.0.9-hotfix6 is vulnerable to CVE-2023-1457.
How can I fix CVE-2023-1457?
To fix CVE-2023-1457, it is recommended to update the firmware of Ubiquiti EdgeRouter X to a version that is not affected by the vulnerability.
- collector/nvd-index
- agent/references
- agent/type
- agent/first-publish-date
- agent/weakness
- agent/severity
- agent/author
- agent/description
- agent/status
- agent/softwarecombine
- agent/tags
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- status/disputed
- vendor/ui
- canonical/ui edgerouter x firmware
- version/ui edgerouter x firmware/2.0.9-hotfix6
- canonical/ui edgerouter x