A vulnerability, found in EdgeRouters Version 2.0.9-hotfix.5 and earlier and UniFi Security Gateways (USG) Version 4.4.56 and earlier with their DHCPv6 prefix delegation set to dhcpv6-stateless or dhcpv6-stateful, allows a malicious actor directly connected to the WAN interface of an affected device to create a remote code execution vulnerability.

Published 2023-02-09 · Modified

8.8EPSS 0.009

CVE-2019-16889

Ubiquiti EdgeMAX devices before 2.0.3 allow remote attackers to cause a denial of service (disk consumption) because *.cache files in /var/run/beaker/container_file/ are created when providing a valid length payload of 249 characters or fewer to the beaker.session.id cookie in a GET header. The attacker can use a long series of unique session IDs.

Published 2019-09-25 · Modified

7.8EPSS 0.051

CVE-2023-2379

Ubiquiti EdgeRouter X Web Service denial of service

Published 2023-04-28 · Modified

7.8EPSS 0.013

Ui Ubiquiti ER-X-SFP - any version

Security check