CVE-2023-24104: Critical severity unifi dream machine pro firmware vulnerability
Published Feb 23, 2023
·Updated
Ubiquiti Networks UniFi Dream Machine Pro v7.2.95 allows attackers to bypass domain restrictions via crafted packets.
Affected Software
4 affected components
UI Unifi Dream Machine Pro Firmware=7.2.95
UI UniFi Dream Machine Pro
All of the following
UI Unifi Dream Machine Pro Firmware=7.2.95
UI UniFi Dream Machine Pro
Event History
Feb 23, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this Ubiquiti Networks UniFi Dream Machine Pro vulnerability?
The vulnerability ID for this Ubiquiti Networks UniFi Dream Machine Pro vulnerability is CVE-2023-24104.
2
What is the title of this Ubiquiti Networks UniFi Dream Machine Pro vulnerability?
The title of this Ubiquiti Networks UniFi Dream Machine Pro vulnerability is 'Ubiquiti Networks UniFi Dream Machine Pro v7.2.95 allows attackers to bypass domain restrictions via crafted packets.'
3
How severe is the CVE-2023-24104 vulnerability?
The CVE-2023-24104 vulnerability is rated as critical with a severity value of 9.8.
4
What software versions are affected by the CVE-2023-24104 vulnerability?
The CVE-2023-24104 vulnerability affects Ubiquiti Networks UniFi Dream Machine Pro firmware version 7.2.95.
5
How can the CVE-2023-24104 vulnerability be exploited?
The CVE-2023-24104 vulnerability can be exploited by attackers bypassing domain restrictions via crafted packets.