CVE-2023-2374: Ubiquiti EdgeRouter X Web Management command injection

Published Apr 28, 2023
·
Updated

A security flaw has been discovered in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This issue affects some unknown processing of the component Web Management Interface. Performing a manipulation of the argument ecn-down results in command injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The existence of this vulnerability is still disputed at present. The vendor position is that post-authentication issues are not accepted as vulnerabilities.

Other sources

A vulnerability has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6 and classified as critical. This vulnerability affects unknown code of the component Web Management Interface. The manipulation of the argument ecn-down leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-227650 is the identifier assigned to this vulnerability.

Affected Software

30 affected components
UI Er-x Firmware<2.0.9
UI Er-x Firmware=2.0.9
UI Er-x Firmware=2.0.9-hotfix2
UI Er-x Firmware=2.0.9-hotfix3
UI Er-x Firmware=2.0.9-hotfix4
UI Er-x Firmware=2.0.9-hotfix5
UI Er-x Firmware=2.0.9-hotfix6
UI Er-x
UI Er-x-sfp Firmware<2.0.9
UI Er-x-sfp Firmware=2.0.9
UI Er-x-sfp Firmware=2.0.9-hotfix2
UI Er-x-sfp Firmware=2.0.9-hotfix4
UI Er-x-sfp Firmware=2.0.9-hotfix5
UI Er-x-sfp Firmware=2.0.9-hotfix6
UI Er-x-sfp
All of the following
Any of the following
UI Er-x Firmware<2.0.9
UI Er-x Firmware=2.0.9
UI Er-x Firmware=2.0.9-hotfix2
UI Er-x Firmware=2.0.9-hotfix3
UI Er-x Firmware=2.0.9-hotfix4
UI Er-x Firmware=2.0.9-hotfix5
UI Er-x Firmware=2.0.9-hotfix6
UI Er-x
All of the following
Any of the following
UI Er-x-sfp Firmware<2.0.9
UI Er-x-sfp Firmware=2.0.9
UI Er-x-sfp Firmware=2.0.9-hotfix2
UI Er-x-sfp Firmware=2.0.9-hotfix4
UI Er-x-sfp Firmware=2.0.9-hotfix5
UI Er-x-sfp Firmware=2.0.9-hotfix6
UI Er-x-sfp

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Compensating control

    Mitigate the Ubiquiti EdgeRouter X Web Management Interface remote command injection (VDB-227650) by restricting network access to the Web Management Interface so it cannot be reached remotely (e.g., allow only trusted management IPs; block from untrusted networks).

  2. Compensating control

    If remote management is not required, disable the Web Management Interface exposure to prevent exploitation of the command injection via the ecn-down argument (VDB-227650).

Event History

Apr 28, 2023
CVE Published
via MITRE·02:31 PM
Data Sourced
via MITRE·02:31 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Jul 5, 58490
Event
via NVD·01:35 PM
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2023-2374?

The severity of CVE-2023-2374 is classified as critical.

2

How does CVE-2023-2374 affect the Ubiquiti EdgeRouter X?

CVE-2023-2374 affects the Web Management Interface of the Ubiquiti EdgeRouter X.

3

What is the vulnerability type of CVE-2023-2374?

CVE-2023-2374 is a command injection vulnerability.

4

Can CVE-2023-2374 be exploited remotely?

Yes, CVE-2023-2374 can be exploited remotely.

5

How do I fix CVE-2023-2374?

To fix CVE-2023-2374, update to the latest version of Ubiquiti EdgeRouter X firmware.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203