CVE-2023-35085: Integer Overflow
An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Monitoring and default settings enabled could allow a Remote Code Execution (RCE).
Affected Products: All UniFi Access Points (Version 6.5.50 and earlier) All UniFi Switches (Version 6.5.32 and earlier) -USW Flex Mini excluded.
Mitigation: Update UniFi Access Points to Version 6.5.62 or later. Update the UniFi Switches to Version 6.5.59 or later.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this UniFi Access Points and Switches vulnerability?
The vulnerability ID is CVE-2023-35085.
What is the severity level of CVE-2023-35085?
The severity level of CVE-2023-35085 is critical with a severity value of 9.8.
Which products are affected by CVE-2023-35085?
All UniFi Access Points (Version 6.5.50 and earlier) and All UniFi Switches (Version 6.5.32 and earlier) are affected by CVE-2023-35085.
How can the CVE-2023-35085 vulnerability be exploited?
The CVE-2023-35085 vulnerability can be exploited through a Remote Code Execution (RCE) if SNMP Monitoring and default settings are enabled.
Where can I find more information about CVE-2023-35085?
You can find more information about CVE-2023-35085 in the [Security Advisory Bulletin](https://community.ui.com/releases/Security-Advisory-Bulletin-035-035/91107858-9884-44df-b1c6-63c6499f6e56).