CVE-2023-2374: Ubiquiti EdgeRouter X Web Management command injection
A security flaw has been discovered in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This issue affects some unknown processing of the component Web Management Interface. Performing a manipulation of the argument ecn-down results in command injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The existence of this vulnerability is still disputed at present. The vendor position is that post-authentication issues are not accepted as vulnerabilities.
Other sources
A vulnerability has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6 and classified as critical. This vulnerability affects unknown code of the component Web Management Interface. The manipulation of the argument ecn-down leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-227650 is the identifier assigned to this vulnerability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Mitigate the Ubiquiti EdgeRouter X Web Management Interface remote command injection (VDB-227650) by restricting network access to the Web Management Interface so it cannot be reached remotely (e.g., allow only trusted management IPs; block from untrusted networks).
- Compensating control
If remote management is not required, disable the Web Management Interface exposure to prevent exploitation of the command injection via the ecn-down argument (VDB-227650).
Event History
Frequently Asked Questions
What is the severity of CVE-2023-2374?
The severity of CVE-2023-2374 is classified as critical.
How does CVE-2023-2374 affect the Ubiquiti EdgeRouter X?
CVE-2023-2374 affects the Web Management Interface of the Ubiquiti EdgeRouter X.
What is the vulnerability type of CVE-2023-2374?
CVE-2023-2374 is a command injection vulnerability.
Can CVE-2023-2374 be exploited remotely?
Yes, CVE-2023-2374 can be exploited remotely.
How do I fix CVE-2023-2374?
To fix CVE-2023-2374, update to the latest version of Ubiquiti EdgeRouter X firmware.