CyberQA - UniFi - Security Advisory Bulletin 035

: Created: 09 August 2023; Hits: 440

Important news for UniFi network hardware users! An integer overflow vulnerability discovered in all UniFi Access Points and Switches (excluding the Switch Flex Mini, with SNMP Monitoring and default settings enabled could allow a Remote Code Execution (RCE)) demands immediate action. Protect your network—swiftly upgrade firmware to mitigate risks. Safeguard against potential exploits and ensure uninterrupted connectivity.

Following via UniFi Forum

Overview
Published: Aug 9, 2023

Version: 1.1 Revision: 1.1

Summary 1 of 2

An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Monitoring and default settings enabled could allow a Remote Code Execution (RCE).

Affected Products:

All UniFi Access Points (Version 6.5.50 and earlier)

All UniFi Switches (Version 6.5.32 and earlier)

USW Flex Mini excluded.

Mitigation:

Update UniFi Access Points to Version 6.5.62 or later.

Update the UniFi Switches to Version 6.5.59 or later.

Impact:

CVSS v3.0 Severity and Metrics:

Base Score: 9.0 Critical

Vector:

CVSS: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

CVE: CVE-2023-35085 (Mathew Marcus)

Summary 2 of 2

A command injection vulnerability in the DHCP Client function of all UniFi Access Points and Switches, excluding the Switch Flex Mini, could allow a Remote Code Execution (RCE).

Affected Products:

All UniFi Access Points (Version 6.5.53 and earlier)