CVE-2023-38034 - Vulnerability Details

Vendors	Products
Ui	U6-enterprise U6-enterprise-iw U6-extender U6-iw U6-lite U6-lr U6-mesh U6-pro U6\+ Uap-ac-iw Uap-ac-lite Uap-ac-lr Uap-ac-m Uap-ac-m-pro Uap-ac-pro Ubb Ubb-xg Unifi Switch Firmware Unifi Uap Firmware Us-16-150w Us-24-250w Us-48-500w Us-8-150w Us-8-60w Us-xg-6poe Usw-16-poe Usw-24 Usw-24-poe Usw-48 Usw-48-poe Usw-aggregation Usw-enterprise-24-poe Usw-enterprise-48-poe Usw-enterprise-8-poe Usw-enterprisexg-24 Usw-flex Usw-flex-xg Usw-industrial Usw-lite-16-poe Usw-lite-8-poe Usw-mission-critical Usw-pro-24 Usw-pro-24-poe Usw-pro-48 Usw-pro-48-poe Usw-pro-aggregation Uwb-xg

Link	Providers
https://community.ui.com/releases/Security-Advisory-Bulletin-035-035/91107858-9884-44df-b1c6-63c6499f6e56

Type	Values Removed	Values Added
CPEs	cpe:2.3:a:ubiquiti:unifi_access_points:::::::: cpe:2.3:o:ubiquiti:unifi_switch_firmware::::::::
Vendors & Products	Ubiquiti Ubiquiti unifi Access Points Ubiquiti unifi Switch Firmware

Type	Values Removed	Values Added
First Time appeared		Ubiquiti Ubiquiti unifi Access Points Ubiquiti unifi Switch Firmware
CPEs		cpe:2.3:a:ubiquiti:unifi_access_points:::::::: cpe:2.3:o:ubiquiti:unifi_switch_firmware::::::::
Vendors & Products		Ubiquiti Ubiquiti unifi Access Points Ubiquiti unifi Switch Firmware
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-38034", "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "state": "PUBLISHED", "assignerShortName": "hackerone", "dateReserved": "2023-07-12T01:00:11.880Z", "datePublished": "2023-08-10T18:58:07.647Z", "dateUpdated": "2024-12-04T16:30:27.937Z"}, "containers": {"cna": {"descriptions": [{"lang": "en", "value": "A command injection vulnerability in the DHCP Client function of all UniFi Access Points and Switches, excluding the Switch Flex Mini, could allow a Remote Code Execution (RCE).\n\n \nAffected Products:\nAll UniFi Access Points (Version 6.5.53 and earlier)\nAll UniFi Switches (Version 6.5.32 and earlier) \n-USW Flex Mini excluded.\n \n\nMitigation:\nUpdate UniFi Access Points to Version 6.5.62 or later.\nUpdate UniFi Switches to Version 6.5.59 or later."}], "affected": [{"defaultStatus": "unaffected", "vendor": "Ubiquiti Inc", "product": "UniFi Access Points", "versions": [{"version": "6.5.53", "status": "affected", "lessThanOrEqual": "6.5.53", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "vendor": "Ubiquiti Inc", "product": "UniFi Switches", "versions": [{"version": "6.5.32", "status": "affected", "lessThanOrEqual": "6.5.32", "versionType": "semver"}]}], "references": [{"url": "https://community.ui.com/releases/Security-Advisory-Bulletin-035-035/91107858-9884-44df-b1c6-63c6499f6e56"}], "metrics": [{"cvssV3_0": {"version": "3.0", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "baseScore": 8.3, "baseSeverity": "HIGH"}}], "providerMetadata": {"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "shortName": "hackerone", "dateUpdated": "2023-08-10T18:58:07.647Z"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T17:30:12.339Z"}, "title": "CVE Program Container", "references": [{"url": "https://community.ui.com/releases/Security-Advisory-Bulletin-035-035/91107858-9884-44df-b1c6-63c6499f6e56", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-10-09T19:39:04.848268Z", "id": "CVE-2023-38034", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-04T16:30:27.937Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2023-38034 (string)

assignerOrgId : 36234546-b8fa-4601-9d6f-f4e334aa8ea1 (string)

state : PUBLISHED (string)

assignerShortName : hackerone (string)

dateReserved : 2023-07-12T01:00:11.880Z (string)

datePublished : 2023-08-10T18:58:07.647Z (string)

dateUpdated : 2024-12-04T16:30:27.937Z (string)

}

containers : { »

cna : { »

descriptions : [ »

0 : { »

lang : en (string)

value : A command injection vulnerability in the DHCP Client function of all UniFi Access Points and Switches, excluding the Switch Flex Mini, could allow a Remote Code Execution (RCE). Affected Products: All UniFi Access Points (Version 6.5.53 and earlier) All UniFi Switches (Version 6.5.32 and earlier) -USW Flex Mini excluded. Mitigation: Update UniFi Access Points to Version 6.5.62 or later. Update UniFi Switches to Version 6.5.59 or later. (string)

}

]

affected : [ »

0 : { »

defaultStatus : unaffected (string)

vendor : Ubiquiti Inc (string)

product : UniFi Access Points (string)

versions : [ »

0 : { »

version : 6.5.53 (string)

status : affected (string)

lessThanOrEqual : 6.5.53 (string)

versionType : semver (string)

}

]

}

1 : { »

defaultStatus : unaffected (string)

vendor : Ubiquiti Inc (string)

product : UniFi Switches (string)

versions : [ »

0 : { »

version : 6.5.32 (string)

status : affected (string)

lessThanOrEqual : 6.5.32 (string)

versionType : semver (string)

}

]

}

]

references : [ »

0 : { »

url : https://community.ui.com/releases/Security-Advisory-Bulletin-035-035/91107858-9884-44df-b1c6-63c6499f6e56 (string)

}

]

metrics : [ »

0 : { »

cvssV3_0 : { »

version : 3.0 (string)

vectorString : CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H (string)

baseScore : 8.3 (number)

baseSeverity : HIGH (string)

}

]

providerMetadata : { »

orgId : 36234546-b8fa-4601-9d6f-f4e334aa8ea1 (string)

shortName : hackerone (string)

dateUpdated : 2023-08-10T18:58:07.647Z (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T17:30:12.339Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://community.ui.com/releases/Security-Advisory-Bulletin-035-035/91107858-9884-44df-b1c6-63c6499f6e56 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

1 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-10-09T19:39:04.848268Z (string)

id : CVE-2023-38034 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-12-04T16:30:27.937Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://community.ui.com/releases/Security-Advisory-Bulletin-035-035/91107858-9884-44df-b1c6-63c6499f6e56", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T17:30:12.339Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-38034", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-10-09T19:39:04.848268Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-09T19:40:24.762Z"}}], "cna": {"metrics": [{"cvssV3_0": {"version": "3.0", "baseScore": 8.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H"}}], "affected": [{"vendor": "Ubiquiti Inc", "product": "UniFi Access Points", "versions": [{"status": "affected", "version": "6.5.53", "versionType": "semver", "lessThanOrEqual": "6.5.53"}], "defaultStatus": "unaffected"}, {"vendor": "Ubiquiti Inc", "product": "UniFi Switches", "versions": [{"status": "affected", "version": "6.5.32", "versionType": "semver", "lessThanOrEqual": "6.5.32"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://community.ui.com/releases/Security-Advisory-Bulletin-035-035/91107858-9884-44df-b1c6-63c6499f6e56"}], "descriptions": [{"lang": "en", "value": "A command injection vulnerability in the DHCP Client function of all UniFi Access Points and Switches, excluding the Switch Flex Mini, could allow a Remote Code Execution (RCE).\n\n \nAffected Products:\nAll UniFi Access Points (Version 6.5.53 and earlier)\nAll UniFi Switches (Version 6.5.32 and earlier) \n-USW Flex Mini excluded.\n \n\nMitigation:\nUpdate UniFi Access Points to Version 6.5.62 or later.\nUpdate UniFi Switches to Version 6.5.59 or later."}], "providerMetadata": {"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "shortName": "hackerone", "dateUpdated": "2023-08-10T18:58:07.647Z"}}}, "cveMetadata": {"cveId": "CVE-2023-38034", "state": "PUBLISHED", "dateUpdated": "2024-12-04T16:30:27.937Z", "dateReserved": "2023-07-12T01:00:11.880Z", "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "datePublished": "2023-08-10T18:58:07.647Z", "assignerShortName": "hackerone"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://community.ui.com/releases/Security-Advisory-Bulletin-035-035/91107858-9884-44df-b1c6-63c6499f6e56 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T17:30:12.339Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2023-38034 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-10-09T19:39:04.848268Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-10-09T19:40:24.762Z (string)

}

]

cna : { »

metrics : [ »

0 : { »

cvssV3_0 : { »

version : 3.0 (string)

baseScore : 8.3 (number)

baseSeverity : HIGH (string)

vectorString : CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H (string)

}

]

affected : [ »

0 : { »

vendor : Ubiquiti Inc (string)

product : UniFi Access Points (string)

versions : [ »

0 : { »

status : affected (string)

version : 6.5.53 (string)

versionType : semver (string)

lessThanOrEqual : 6.5.53 (string)

}

]

defaultStatus : unaffected (string)

}

1 : { »

vendor : Ubiquiti Inc (string)

product : UniFi Switches (string)

versions : [ »

0 : { »

status : affected (string)

version : 6.5.32 (string)

versionType : semver (string)

lessThanOrEqual : 6.5.32 (string)

}

]

defaultStatus : unaffected (string)

}

]

references : [ »

0 : { »

url : https://community.ui.com/releases/Security-Advisory-Bulletin-035-035/91107858-9884-44df-b1c6-63c6499f6e56 (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A command injection vulnerability in the DHCP Client function of all UniFi Access Points and Switches, excluding the Switch Flex Mini, could allow a Remote Code Execution (RCE). Affected Products: All UniFi Access Points (Version 6.5.53 and earlier) All UniFi Switches (Version 6.5.32 and earlier) -USW Flex Mini excluded. Mitigation: Update UniFi Access Points to Version 6.5.62 or later. Update UniFi Switches to Version 6.5.59 or later. (string)

}

]

providerMetadata : { »

orgId : 36234546-b8fa-4601-9d6f-f4e334aa8ea1 (string)

shortName : hackerone (string)

dateUpdated : 2023-08-10T18:58:07.647Z (string)

}

cveMetadata : { »

cveId : CVE-2023-38034 (string)

state : PUBLISHED (string)

dateUpdated : 2024-12-04T16:30:27.937Z (string)

dateReserved : 2023-07-12T01:00:11.880Z (string)

assignerOrgId : 36234546-b8fa-4601-9d6f-f4e334aa8ea1 (string)

datePublished : 2023-08-10T18:58:07.647Z (string)

assignerShortName : hackerone (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:ui:unifi_uap_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F4AEF57B-2155-4BEA-89F5-037E34C4E507", "versionEndIncluding": "6.5.53", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:ui:u6\\+:-:*:*:*:*:*:*:*", "matchCriteriaId": "E2CE9DEA-F0FD-4A8E-98AB-36F87C40F1F5", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:u6-enterprise:-:*:*:*:*:*:*:*", "matchCriteriaId": "1020447C-93FA-42D6-BA01-D1AE08B25C2D", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:u6-enterprise-iw:-:*:*:*:*:*:*:*", "matchCriteriaId": "76254C68-9B4A-4235-8E33-57258EDD5AA0", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:u6-extender:-:*:*:*:*:*:*:*", "matchCriteriaId": "0CDC687A-C0E1-4F77-AA16-963BE9CDBC3C", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:u6-iw:-:*:*:*:*:*:*:*", "matchCriteriaId": "2640C955-4707-4C41-821D-C5A6167B2856", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:u6-lite:-:*:*:*:*:*:*:*", "matchCriteriaId": "F8D6010F-39B5-4035-BCFA-3EC40BFED5CF", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:u6-lr:-:*:*:*:*:*:*:*", "matchCriteriaId": "573BC349-D7EA-4F64-83C3-A0402D8D8AD1", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:u6-mesh:-:*:*:*:*:*:*:*", "matchCriteriaId": "5986D778-24F3-4972-92FC-AAF2ECF8FAFA", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:u6-pro:-:*:*:*:*:*:*:*", "matchCriteriaId": "3F230AF7-CF0B-4F3A-A536-D25DB9DA52E0", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:uap-ac-iw:-:*:*:*:*:*:*:*", "matchCriteriaId": "4D055A30-7260-4548-A53E-A494FEE18E7F", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:uap-ac-lite:-:*:*:*:*:*:*:*", "matchCriteriaId": "C591F57C-0162-4B8F-BA1A-AAA154065D4B", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:uap-ac-lr:-:*:*:*:*:*:*:*", "matchCriteriaId": "E6F7A9AF-67ED-4AB0-86CB-B6386566CB6A", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:uap-ac-m:-:*:*:*:*:*:*:*", "matchCriteriaId": "B27159DB-E6FC-494F-B5E1-C2C6B5EC1FCC", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:uap-ac-m-pro:-:*:*:*:*:*:*:*", "matchCriteriaId": "FB265A14-6E1F-498B-9D0E-DE91F1155C69", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:uap-ac-pro:-:*:*:*:*:*:*:*", "matchCriteriaId": "46FD9619-1620-41ED-9B2F-14DBD468744F", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:ubb:-:*:*:*:*:*:*:*", "matchCriteriaId": "E6480788-66E3-496A-B1D8-4A190E5D2222", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:ubb-xg:-:*:*:*:*:*:*:*", "matchCriteriaId": "F840F091-FA53-4F41-9DDE-F00C0C377EC5", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:uwb-xg:-:*:*:*:*:*:*:*", "matchCriteriaId": "10E8DBA7-B43B-4EA7-A8AC-AC50AA4714F6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:ui:unifi_switch_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "08AC707B-15BA-4E28-9986-372DE2389074", "versionEndIncluding": "6.5.32", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:ui:us-16-150w:-:*:*:*:*:*:*:*", "matchCriteriaId": "FD780EAB-CA86-4CC7-9D80-63AC898422D8", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:us-24-250w:-:*:*:*:*:*:*:*", "matchCriteriaId": "3EE87B72-7316-4CA9-BC9B-0CA62D48D82E", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:us-48-500w:-:*:*:*:*:*:*:*", "matchCriteriaId": "45AFD894-70FC-4E9A-B4C4-E3785C4A3479", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:us-8-150w:-:*:*:*:*:*:*:*", "matchCriteriaId": "C4D3F7DA-B5A1-4AE9-9E29-468618F7EF50", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:us-8-60w:-:*:*:*:*:*:*:*", "matchCriteriaId": "5F043681-EE08-4D84-9C04-DF38526261E7", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:us-xg-6poe:-:*:*:*:*:*:*:*", "matchCriteriaId": "6E973806-9CF3-4FFD-8F11-EB269802C8FB", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:usw-16-poe:-:*:*:*:*:*:*:*", "matchCriteriaId": "F0546CAF-C129-4851-8F11-643210ED412F", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:usw-24:-:*:*:*:*:*:*:*", "matchCriteriaId": "A4AEC37C-535D-4D91-A5E7-E5279A633019", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:usw-24-poe:-:*:*:*:*:*:*:*", "matchCriteriaId": "C462A08D-BDFA-48B4-BEAF-08CEB150B059", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:usw-48:-:*:*:*:*:*:*:*", "matchCriteriaId": "3FD64A71-56FF-4085-AF6C-15EA0F6E8378", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:usw-48-poe:-:*:*:*:*:*:*:*", "matchCriteriaId": "685D1F65-83D4-4B17-B32E-7ACE6DC5369A", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:usw-aggregation:-:*:*:*:*:*:*:*", "matchCriteriaId": "F6125A5E-9951-4563-990A-4E650CDC9B98", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:usw-enterprise-24-poe:-:*:*:*:*:*:*:*", "matchCriteriaId": "724A3C35-8CCF-4A20-A007-9BDF95940892", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:usw-enterprise-48-poe:-:*:*:*:*:*:*:*", "matchCriteriaId": "418FFCA4-3818-4F4D-85F6-1458380D459F", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:usw-enterprise-8-poe:-:*:*:*:*:*:*:*", "matchCriteriaId": "3E0A4E44-97FB-4B58-8032-B37B2841C053", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:usw-enterprisexg-24:-:*:*:*:*:*:*:*", "matchCriteriaId": "44744D4A-C95F-4404-941E-58C8F2FD215E", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:usw-flex:-:*:*:*:*:*:*:*", "matchCriteriaId": "8380E3AB-B7CA-4383-A69B-A9035975C6C5", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:usw-flex-xg:-:*:*:*:*:*:*:*", "matchCriteriaId": "140D2FF7-F27D-4DE5-A282-D7C142A767FC", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:usw-industrial:-:*:*:*:*:*:*:*", "matchCriteriaId": "BF462DED-B7F7-48F4-BB0D-07CD0F967CC9", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:usw-lite-16-poe:-:*:*:*:*:*:*:*", "matchCriteriaId": "C81323E8-B673-4583-8D95-54305AA0BF22", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:usw-lite-8-poe:-:*:*:*:*:*:*:*", "matchCriteriaId": "BE6FF084-A010-42D8-B825-3B9148EBF20D", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:usw-mission-critical:-:*:*:*:*:*:*:*", "matchCriteriaId": "20BC9784-AFE7-4D26-AC04-43F81400D839", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:usw-pro-24:-:*:*:*:*:*:*:*", "matchCriteriaId": "84A4E1C5-D11A-42A4-A7E5-E155BF12D7E9", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:usw-pro-24-poe:-:*:*:*:*:*:*:*", "matchCriteriaId": "05C14A48-3695-425E-9E3E-FD6C9025564F", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:usw-pro-48:-:*:*:*:*:*:*:*", "matchCriteriaId": "318EA276-9F4D-4963-AE6B-A73EC6239C29", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:usw-pro-48-poe:-:*:*:*:*:*:*:*", "matchCriteriaId": "B7AB243A-FAF3-487C-AAAC-9B5895736EAB", "vulnerable": false}, {"criteria": "cpe:2.3:h:ui:usw-pro-aggregation:-:*:*:*:*:*:*:*", "matchCriteriaId": "85F5CCEF-45DC-4EF6-83AB-FCFE60BFFF4D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "A command injection vulnerability in the DHCP Client function of all UniFi Access Points and Switches, excluding the Switch Flex Mini, could allow a Remote Code Execution (RCE).\n\n \nAffected Products:\nAll UniFi Access Points (Version 6.5.53 and earlier)\nAll UniFi Switches (Version 6.5.32 and earlier) \n-USW Flex Mini excluded.\n \n\nMitigation:\nUpdate UniFi Access Points to Version 6.5.62 or later.\nUpdate UniFi Switches to Version 6.5.59 or later."}], "id": "CVE-2023-38034", "lastModified": "2024-11-21T08:12:43.107", "metrics": {"cvssMetricV30": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 1.6, "impactScore": 6.0, "source": "support@hackerone.com", "type": "Secondary"}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-08-10T19:15:09.803", "references": [{"source": "support@hackerone.com", "tags": ["Issue Tracking", "Vendor Advisory"], "url": "https://community.ui.com/releases/Security-Advisory-Bulletin-035-035/91107858-9884-44df-b1c6-63c6499f6e56"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Vendor Advisory"], "url": "https://community.ui.com/releases/Security-Advisory-Bulletin-035-035/91107858-9884-44df-b1c6-63c6499f6e56"}], "sourceIdentifier": "support@hackerone.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-77"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:ui:unifi_uap_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : F4AEF57B-2155-4BEA-89F5-037E34C4E507 (string)

versionEndIncluding : 6.5.53 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:ui:u6\+:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E2CE9DEA-F0FD-4A8E-98AB-36F87C40F1F5 (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:h:ui:u6-enterprise:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 1020447C-93FA-42D6-BA01-D1AE08B25C2D (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:h:ui:u6-enterprise-iw:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 76254C68-9B4A-4235-8E33-57258EDD5AA0 (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:h:ui:u6-extender:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 0CDC687A-C0E1-4F77-AA16-963BE9CDBC3C (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:h:ui:u6-iw:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2640C955-4707-4C41-821D-C5A6167B2856 (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:h:ui:u6-lite:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F8D6010F-39B5-4035-BCFA-3EC40BFED5CF (string)

vulnerable : false (boolean)

}

6 : { »

criteria : cpe:2.3:h:ui:u6-lr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 573BC349-D7EA-4F64-83C3-A0402D8D8AD1 (string)

vulnerable : false (boolean)

}

7 : { »

criteria : cpe:2.3:h:ui:u6-mesh:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 5986D778-24F3-4972-92FC-AAF2ECF8FAFA (string)

vulnerable : false (boolean)

}

8 : { »

criteria : cpe:2.3:h:ui:u6-pro:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3F230AF7-CF0B-4F3A-A536-D25DB9DA52E0 (string)

vulnerable : false (boolean)

}

9 : { »

criteria : cpe:2.3:h:ui:uap-ac-iw:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 4D055A30-7260-4548-A53E-A494FEE18E7F (string)

vulnerable : false (boolean)

}

10 : { »

criteria : cpe:2.3:h:ui:uap-ac-lite:-:*:*:*:*:*:*:* (string)

matchCriteriaId : C591F57C-0162-4B8F-BA1A-AAA154065D4B (string)

vulnerable : false (boolean)

}

11 : { »

criteria : cpe:2.3:h:ui:uap-ac-lr:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E6F7A9AF-67ED-4AB0-86CB-B6386566CB6A (string)

vulnerable : false (boolean)

}

12 : { »

criteria : cpe:2.3:h:ui:uap-ac-m:-:*:*:*:*:*:*:* (string)

matchCriteriaId : B27159DB-E6FC-494F-B5E1-C2C6B5EC1FCC (string)

vulnerable : false (boolean)

}

13 : { »

criteria : cpe:2.3:h:ui:uap-ac-m-pro:-:*:*:*:*:*:*:* (string)

matchCriteriaId : FB265A14-6E1F-498B-9D0E-DE91F1155C69 (string)

vulnerable : false (boolean)

}

14 : { »

criteria : cpe:2.3:h:ui:uap-ac-pro:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 46FD9619-1620-41ED-9B2F-14DBD468744F (string)

vulnerable : false (boolean)

}

15 : { »

criteria : cpe:2.3:h:ui:ubb:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E6480788-66E3-496A-B1D8-4A190E5D2222 (string)

vulnerable : false (boolean)

}

16 : { »

criteria : cpe:2.3:h:ui:ubb-xg:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F840F091-FA53-4F41-9DDE-F00C0C377EC5 (string)

vulnerable : false (boolean)

}

17 : { »

criteria : cpe:2.3:h:ui:uwb-xg:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 10E8DBA7-B43B-4EA7-A8AC-AC50AA4714F6 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:ui:unifi_switch_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 08AC707B-15BA-4E28-9986-372DE2389074 (string)

versionEndIncluding : 6.5.32 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:ui:us-16-150w:-:*:*:*:*:*:*:* (string)

matchCriteriaId : FD780EAB-CA86-4CC7-9D80-63AC898422D8 (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:h:ui:us-24-250w:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3EE87B72-7316-4CA9-BC9B-0CA62D48D82E (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:h:ui:us-48-500w:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 45AFD894-70FC-4E9A-B4C4-E3785C4A3479 (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:h:ui:us-8-150w:-:*:*:*:*:*:*:* (string)

matchCriteriaId : C4D3F7DA-B5A1-4AE9-9E29-468618F7EF50 (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:h:ui:us-8-60w:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 5F043681-EE08-4D84-9C04-DF38526261E7 (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:h:ui:us-xg-6poe:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 6E973806-9CF3-4FFD-8F11-EB269802C8FB (string)

vulnerable : false (boolean)

}

6 : { »

criteria : cpe:2.3:h:ui:usw-16-poe:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F0546CAF-C129-4851-8F11-643210ED412F (string)

vulnerable : false (boolean)

}

7 : { »

criteria : cpe:2.3:h:ui:usw-24:-:*:*:*:*:*:*:* (string)

matchCriteriaId : A4AEC37C-535D-4D91-A5E7-E5279A633019 (string)

vulnerable : false (boolean)

}

8 : { »

criteria : cpe:2.3:h:ui:usw-24-poe:-:*:*:*:*:*:*:* (string)

matchCriteriaId : C462A08D-BDFA-48B4-BEAF-08CEB150B059 (string)

vulnerable : false (boolean)

}

9 : { »

criteria : cpe:2.3:h:ui:usw-48:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3FD64A71-56FF-4085-AF6C-15EA0F6E8378 (string)

vulnerable : false (boolean)

}

10 : { »

criteria : cpe:2.3:h:ui:usw-48-poe:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 685D1F65-83D4-4B17-B32E-7ACE6DC5369A (string)

vulnerable : false (boolean)

}

11 : { »

criteria : cpe:2.3:h:ui:usw-aggregation:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F6125A5E-9951-4563-990A-4E650CDC9B98 (string)

vulnerable : false (boolean)

}

12 : { »

criteria : cpe:2.3:h:ui:usw-enterprise-24-poe:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 724A3C35-8CCF-4A20-A007-9BDF95940892 (string)

vulnerable : false (boolean)

}

13 : { »

criteria : cpe:2.3:h:ui:usw-enterprise-48-poe:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 418FFCA4-3818-4F4D-85F6-1458380D459F (string)

vulnerable : false (boolean)

}

14 : { »

criteria : cpe:2.3:h:ui:usw-enterprise-8-poe:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3E0A4E44-97FB-4B58-8032-B37B2841C053 (string)

vulnerable : false (boolean)

}

15 : { »

criteria : cpe:2.3:h:ui:usw-enterprisexg-24:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 44744D4A-C95F-4404-941E-58C8F2FD215E (string)

vulnerable : false (boolean)

}

16 : { »

criteria : cpe:2.3:h:ui:usw-flex:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8380E3AB-B7CA-4383-A69B-A9035975C6C5 (string)

vulnerable : false (boolean)

}

17 : { »

criteria : cpe:2.3:h:ui:usw-flex-xg:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 140D2FF7-F27D-4DE5-A282-D7C142A767FC (string)

vulnerable : false (boolean)

}

18 : { »

criteria : cpe:2.3:h:ui:usw-industrial:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BF462DED-B7F7-48F4-BB0D-07CD0F967CC9 (string)

vulnerable : false (boolean)

}

19 : { »

criteria : cpe:2.3:h:ui:usw-lite-16-poe:-:*:*:*:*:*:*:* (string)

matchCriteriaId : C81323E8-B673-4583-8D95-54305AA0BF22 (string)

vulnerable : false (boolean)

}

20 : { »

criteria : cpe:2.3:h:ui:usw-lite-8-poe:-:*:*:*:*:*:*:* (string)

matchCriteriaId : BE6FF084-A010-42D8-B825-3B9148EBF20D (string)

vulnerable : false (boolean)

}

21 : { »

criteria : cpe:2.3:h:ui:usw-mission-critical:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 20BC9784-AFE7-4D26-AC04-43F81400D839 (string)

vulnerable : false (boolean)

}

22 : { »

criteria : cpe:2.3:h:ui:usw-pro-24:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 84A4E1C5-D11A-42A4-A7E5-E155BF12D7E9 (string)

vulnerable : false (boolean)

}

23 : { »

criteria : cpe:2.3:h:ui:usw-pro-24-poe:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 05C14A48-3695-425E-9E3E-FD6C9025564F (string)

vulnerable : false (boolean)

}

24 : { »

criteria : cpe:2.3:h:ui:usw-pro-48:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 318EA276-9F4D-4963-AE6B-A73EC6239C29 (string)

vulnerable : false (boolean)

}

25 : { »

criteria : cpe:2.3:h:ui:usw-pro-48-poe:-:*:*:*:*:*:*:* (string)

matchCriteriaId : B7AB243A-FAF3-487C-AAAC-9B5895736EAB (string)

vulnerable : false (boolean)

}

26 : { »

criteria : cpe:2.3:h:ui:usw-pro-aggregation:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 85F5CCEF-45DC-4EF6-83AB-FCFE60BFFF4D (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A command injection vulnerability in the DHCP Client function of all UniFi Access Points and Switches, excluding the Switch Flex Mini, could allow a Remote Code Execution (RCE). Affected Products: All UniFi Access Points (Version 6.5.53 and earlier) All UniFi Switches (Version 6.5.32 and earlier) -USW Flex Mini excluded. Mitigation: Update UniFi Access Points to Version 6.5.62 or later. Update UniFi Switches to Version 6.5.59 or later. (string)

}

]

id : CVE-2023-38034 (string)

lastModified : 2024-11-21T08:12:43.107 (string)

metrics : { »

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : ADJACENT_NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 8.3 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : CHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H (string)

version : 3.0 (string)

}

exploitabilityScore : 1.6 (number)

impactScore : 6 (number)

source : support@hackerone.com (string)

type : Secondary (string)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 9.8 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2023-08-10T19:15:09.803 (string)

references : [ »

0 : { »

source : support@hackerone.com (string)

tags : [ »

0 : Issue Tracking (string)

1 : Vendor Advisory (string)

]

url : https://community.ui.com/releases/Security-Advisory-Bulletin-035-035/91107858-9884-44df-b1c6-63c6499f6e56 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Issue Tracking (string)

1 : Vendor Advisory (string)

]

url : https://community.ui.com/releases/Security-Advisory-Bulletin-035-035/91107858-9884-44df-b1c6-63c6499f6e56 (string)

}

]

sourceIdentifier : support@hackerone.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-77 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Attack Vector Adjacent Network

Attack Complexity High

Privileges Required None

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Attack Vector Adjacent Network

Attack Complexity High

Privileges Required None

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object