CVE-2023-28365 Vulnerability Details

  /     /     /  

CVE-2023-28365 Metadata Quick Info

CVE Published: 30/06/2023 | CVE Updated: 27/11/2024 | CVE Year: 2023
Source: hackerone | Vendor: Ubiquiti Inc. | Product: UniFi Network application
Status : PUBLISHED

---

CVE-2023-28365 Description

A backup file vulnerability found in UniFi applications (Version 7.3.83 and earlier) running on Linux operating systems allows application administrators to execute malicious commands on the host device being restored.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name:
Source: Ubiquiti Inc.

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).