Linux UniFi Malicious Commands Vulnerability

Linux UniFi Malicious Commands Vulnerability

According to the vulnerability report that has been released on 10th of July; a backup file vulnerability was found in UniFi version applications (Version 7.3.83 and earlier) running on Linux operating systems allows application administrators to execute malicious commands on the host device being restored. (CVE-2023-28365)

Affected Systems

Configuration 1
cpe:2.3:a:ui:unifi:*:*:*:*:*:*:*:* Up to (excluding) 7.4.156
Running on/with
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

IoC’s

-

Recommended Solution(s)

-

Mitigations

-

CVE / CWE

CVE-2023-28365

Related Website(s)

• https://nvd.nist.gov/vuln/detail/CVE-2023-28365
• https://community.ui.com/releases/Security-Advisory-Bulletin-031-031/8c85fc64-e9a8-4082-9ec4-56b14effd545

* Vulnerabilities with a CVSS 3.1 score between 7.0 and 8.9 are evaluated to be “high” whereas vulnerabilities with a CVSS 3.1 score between 9.0 and 10.0 are evaluated to be “critical”.