VYPR
← All advisories
High severity8.8NVD Advisory· Published Feb 9, 2023· Updated Jun 17, 2026

CVE-2023-23912

CVE-2023-23912

Description

A vulnerability, found in EdgeRouters Version 2.0.9-hotfix.5 and earlier and UniFi Security Gateways (USG) Version 4.4.56 and earlier with their DHCPv6 prefix delegation set to dhcpv6-stateless or dhcpv6-stateful, allows a malicious actor directly connected to the WAN interface of an affected device to create a remote code execution vulnerability.

Affected products

44
  • UI/Er 10x Firmware5 versions
    cpe:2.3:o:ui:er-10x_firmware:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:o:ui:er-10x_firmware:*:*:*:*:*:*:*:*range: <2.0.9
    • cpe:2.3:o:ui:er-10x_firmware:2.0.9:-:*:*:*:*:*:*
    • cpe:2.3:o:ui:er-10x_firmware:2.0.9:hotfix2:*:*:*:*:*:*
    • cpe:2.3:o:ui:er-10x_firmware:2.0.9:hotfix4:*:*:*:*:*:*
    • cpe:2.3:o:ui:er-10x_firmware:2.0.9:hotfix5:*:*:*:*:*:*
  • UI/Er 12 Firmware5 versions
    cpe:2.3:o:ui:er-12_firmware:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:o:ui:er-12_firmware:*:*:*:*:*:*:*:*range: <2.0.9
    • cpe:2.3:o:ui:er-12_firmware:2.0.9:-:*:*:*:*:*:*
    • cpe:2.3:o:ui:er-12_firmware:2.0.9:hotfix2:*:*:*:*:*:*
    • cpe:2.3:o:ui:er-12_firmware:2.0.9:hotfix4:*:*:*:*:*:*
    • cpe:2.3:o:ui:er-12_firmware:2.0.9:hotfix5:*:*:*:*:*:*
  • UI/Er 12p Firmware5 versions
    cpe:2.3:o:ui:er-12p_firmware:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:o:ui:er-12p_firmware:*:*:*:*:*:*:*:*range: <2.0.9
    • cpe:2.3:o:ui:er-12p_firmware:2.0.9:-:*:*:*:*:*:*
    • cpe:2.3:o:ui:er-12p_firmware:2.0.9:hotfix2:*:*:*:*:*:*
    • cpe:2.3:o:ui:er-12p_firmware:2.0.9:hotfix4:*:*:*:*:*:*
    • cpe:2.3:o:ui:er-12p_firmware:2.0.9:hotfix5:*:*:*:*:*:*
  • UI/Er 4 Firmware5 versions
    cpe:2.3:o:ui:er-4_firmware:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:o:ui:er-4_firmware:*:*:*:*:*:*:*:*range: <2.0.9
    • cpe:2.3:o:ui:er-4_firmware:2.0.9:-:*:*:*:*:*:*
    • cpe:2.3:o:ui:er-4_firmware:2.0.9:hotfix2:*:*:*:*:*:*
    • cpe:2.3:o:ui:er-4_firmware:2.0.9:hotfix4:*:*:*:*:*:*
    • cpe:2.3:o:ui:er-4_firmware:2.0.9:hotfix5:*:*:*:*:*:*
  • UI/Er 6p Firmware5 versions
    cpe:2.3:o:ui:er-6p_firmware:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:o:ui:er-6p_firmware:*:*:*:*:*:*:*:*range: <2.0.9
    • cpe:2.3:o:ui:er-6p_firmware:2.0.9:-:*:*:*:*:*:*
    • cpe:2.3:o:ui:er-6p_firmware:2.0.9:hotfix2:*:*:*:*:*:*
    • cpe:2.3:o:ui:er-6p_firmware:2.0.9:hotfix4:*:*:*:*:*:*
    • cpe:2.3:o:ui:er-6p_firmware:2.0.9:hotfix5:*:*:*:*:*:*
  • UI/Er 8 Xg Firmware5 versions
    cpe:2.3:o:ui:er-8-xg_firmware:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:o:ui:er-8-xg_firmware:*:*:*:*:*:*:*:*range: <2.0.9
    • cpe:2.3:o:ui:er-8-xg_firmware:2.0.9:-:*:*:*:*:*:*
    • cpe:2.3:o:ui:er-8-xg_firmware:2.0.9:hotfix2:*:*:*:*:*:*
    • cpe:2.3:o:ui:er-8-xg_firmware:2.0.9:hotfix4:*:*:*:*:*:*
    • cpe:2.3:o:ui:er-8-xg_firmware:2.0.9:hotfix5:*:*:*:*:*:*
  • UI/Er X Sfp Firmware5 versions
    cpe:2.3:o:ui:er-x-sfp_firmware:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:o:ui:er-x-sfp_firmware:*:*:*:*:*:*:*:*range: <2.0.9
    • cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:-:*:*:*:*:*:*
    • cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix2:*:*:*:*:*:*
    • cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix4:*:*:*:*:*:*
    • cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix5:*:*:*:*:*:*
  • UI/Er X Firmware5 versions
    cpe:2.3:o:ui:er-x_firmware:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:o:ui:er-x_firmware:*:*:*:*:*:*:*:*range: <2.0.9
    • cpe:2.3:o:ui:er-x_firmware:2.0.9:-:*:*:*:*:*:*
    • cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix2:*:*:*:*:*:*
    • cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix4:*:*:*:*:*:*
    • cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix5:*:*:*:*:*:*
  • UI/Usg Pro 4 Firmware
    cpe:2.3:o:ui:usg-pro-4_firmware:*:*:*:*:*:*:*:*
    Range: <4.4.57
  • UI/Usg Firmware
    cpe:2.3:o:ui:usg_firmware:*:*:*:*:*:*:*:*
    Range: <4.4.57
  • Ubiquiti Inc/EdgeRouterllm-fuzzy
    Range: <=2.0.9-hotfix.5
  • Ubiquiti Inc/UniFi Security Gatewayllm-fuzzy
    Range: <=4.4.56

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.