Back
CVE-2023-2374
Ubiquiti EdgeRouter X Web Management command injection
High8.6EPSS 6.9%
- Published
- Updated
- Reserved
- Assigned by
- VulDB
Description
A security flaw has been discovered in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This issue affects some unknown processing of the component Web Management Interface. Performing a manipulation of the argument ecn-down results in command injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. The existence of this vulnerability is still disputed at present. The vendor position is that post-authentication issues are not accepted as vulnerabilities.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| VulDBCNA (assigner) | 4.0 | High8.6 | CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P |
| VulDBCNA (assigner) | 3.1 | High7.2 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R |
| VulDBCNA (assigner) | 3.0 | High7.2 | CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R |
| VulDBCNA (assigner) | 2.0 | High8.3 | AV:N/AC:L/Au:M/C:C/I:C/A:C/E:POC/RL:ND/RC:UR |
| NVDNVD · Modified | 4.0 | High7.3 | CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
- EPSS (exploitation in 30 days)
- 6.9% · top 5.9% of all CVEs (7 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.6.
Weakness
Affected products
- affected 2.0.9-hotfix.0
- affected 2.0.9-hotfix.1
- affected 2.0.9-hotfix.2
- affected 2.0.9-hotfix.3
- affected 2.0.9-hotfix.4
- affected 2.0.9-hotfix.5
- affected 2.0.9-hotfix.6
References (7)
- VDB-227650 | Ubiquiti EdgeRouter X Web Management command injection (opens in a new tab)vdb-entrytechnical-description
- VDB-227650 | CTI Indicators (IOB, IOC, TTP, IOA) (opens in a new tab)signaturepermissions-required
- CVE-2023-2374 | CVE Analysis and Report (opens in a new tab)third-party-advisory
- Submit #114075 | Command injection at the web management interface of EdgeRouter-x(6) (opens in a new tab)third-party-advisory
- https://github.com/leetsun/IoT/tree/main/EdgeRouterX/CI/6 (opens in a new tab)broken-linkexploitx_transferred
- https://vuldb.com/?id.227650 (opens in a new tab)vdb-entrytechnical-descriptionx_transferred
- https://vuldb.com/?ctiid.227650 (opens in a new tab)signaturepermissions-requiredx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2023-2374)Record last updated .