CVE-2023-1458: Command Injection
First published: Sat Mar 25 2023(Updated: )
** DISPUTED ** A vulnerability has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6 and classified as critical. Affected by this vulnerability is an unknown functionality of the component OSPF Handler. The manipulation of the argument area leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The associated identifier of this vulnerability is VDB-223303. NOTE: The vendor position is that post-authentication issues are not accepted as vulnerabilities.
Credit: cna@vuldb.com cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ui Edgerouter X Firmware | =2.0.9-hotfix6 | |
| Ui Edgerouter X | ||
| All of | ||
| =2.0.9-hotfix6 | ||
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-1458?
The severity of CVE-2023-1458 is critical with a CVSS score of 9.8.
What is the affected software of CVE-2023-1458?
The affected software of CVE-2023-1458 is Ubiquiti EdgeRouter X 2.0.9-hotfix.6.
What is the vulnerability description of CVE-2023-1458?
CVE-2023-1458 is a critical vulnerability in Ubiquiti EdgeRouter X 2.0.9-hotfix.6 that allows command injection through manipulation of the argument area in the OSPF Handler component.
Is CVE-2023-1458 currently being attacked remotely?
There are reports of remote attacks targeting CVE-2023-1458.
How can I fix CVE-2023-1458?
To fix CVE-2023-1458, it is recommended to update Ubiquiti EdgeRouter X firmware to version 2.0.9-hotfix7 or later.
- collector/nvd-index
- agent/references
- agent/type
- agent/first-publish-date
- agent/weakness
- agent/severity
- agent/author
- agent/description
- agent/status
- agent/softwarecombine
- agent/tags
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- status/disputed
- vendor/ui
- canonical/ui edgerouter x firmware
- version/ui edgerouter x firmware/2.0.9-hotfix6
- canonical/ui edgerouter x