CVE-2023-28365: Command Injection
Published Jun 30, 2023
·Updated
A backup file vulnerability found in UniFi applications (Version 7.3.83 and earlier) running on Linux operating systems allows application administrators to execute malicious commands on the host device being restored.
Affected Software
4 affected components
All of the following
UI Unifi Network Application<7.4.156
Linux Linux kernel
UI UniFi<7.4.156
Linux Linux kernel
Event History
Jun 30, 2023
CVE Published
via MITRE·11:40 PM
Data Sourced
via MITRE·11:40 PM
Description
Frequently Asked Questions
1
What is CVE-2023-28365?
CVE-2023-28365 is a backup file vulnerability found in UniFi applications (Version 7.3.83 and earlier) running on Linux operating systems.
2
How does CVE-2023-28365 affect UniFi applications?
CVE-2023-28365 allows application administrators to execute malicious commands on the host device being restored.
3
What is the severity of CVE-2023-28365?
CVE-2023-28365 has a severity rating of critical with a CVSS score of 9.1.
4
Which software versions are affected by CVE-2023-28365?
UniFi applications Version 7.3.83 and earlier are affected by CVE-2023-28365.
5
How can I fix CVE-2023-28365?
To fix CVE-2023-28365, update UniFi applications to version 7.4.156 or later.