A backup file vulnerability found in UniFi applications (Version 7.3.83 and earlier) running on Linux operating systems allows application administrators to execute malicious commands on the host device being restored.
References
| Link | Resource |
|---|---|
| https://community.ui.com/releases/Security-Advisory-Bulletin-031-031/8c85fc64-e9a8-4082-9ec4-56b14effd545 | Issue Tracking Vendor Advisory |
| https://community.ui.com/releases/Security-Advisory-Bulletin-031-031/8c85fc64-e9a8-4082-9ec4-56b14effd545 | Issue Tracking Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
12 Dec 2024, 18:54
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:ui:unifi_network_application:*:*:*:*:*:*:*:* | |
| First Time |
Ui unifi Network Application
|
21 Nov 2024, 07:54
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://community.ui.com/releases/Security-Advisory-Bulletin-031-031/8c85fc64-e9a8-4082-9ec4-56b14effd545 - Issue Tracking, Vendor Advisory |
10 Jul 2023, 18:14
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* cpe:2.3:a:ui:unifi:*:*:*:*:*:*:*:* |
|
| References | (MISC) https://community.ui.com/releases/Security-Advisory-Bulletin-031-031/8c85fc64-e9a8-4082-9ec4-56b14effd545 - Issue Tracking, Vendor Advisory | |
| First Time |
Linux linux Kernel
Ui unifi Ui Linux |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.1 |
| CWE | CWE-77 |
01 Jul 2023, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-07-01 00:15
Updated : 2024-12-12 18:54
NVD link : CVE-2023-28365
Mitre link : CVE-2023-28365
CVE.ORG link : CVE-2023-28365
JSON object : View
Products Affected
ui
- unifi_network_application
linux
- linux_kernel
CWE
CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')