VendorsUiedgemax_edgerouter_firmwareall versions
Vulnerabilities

Ui Ubiquiti

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2023-2373
Ubiquiti EdgeRouter X Web Management command injection
Published 2023-04-28 · Modified
8.8EPSS 0.076
CVE-2022-43553
A remote code execution vulnerability in EdgeRouters (Version 2.0.9-hotfix.4 and earlier) allows a malicious actor with an operator account to run arbitrary administrator commands.This vulnerability is fixed in Version 2.0.9-hotfix.5 and later.
Published 2022-12-05 · Modified
8.8EPSS 0.011
CVE-2021-22909
A vulnerability found in EdgeMAX EdgeRouter V2.0.9 and earlier could allow a malicious actor to execute a man-in-the-middle (MitM) attack during a firmware update. This vulnerability is fixed in EdgeMAX EdgeRouter V2.0.9-hotfix.1 and later.
Published 2021-05-27 · Modified
7.6EPSS 0.013
CVE-2023-31998
A heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to interrupt UPnP service to said devices.
Published 2023-07-18 · Modified
7.5EPSS 0.008