Vulnerability Details CVE-2023-28361
A Cross-site WebSocket Hijacking (CSWSH) vulnerability found in UniFi OS 2.5 and earlier allows a malicious actor to access certain confidential information by persuading a UniFi OS user to visit a malicious webpage.Affected Products:Cloud Key Gen2Cloud Key Gen2 PlusUNVRUNVR ProfessionalUDMUDM ProfessionalUDM SEUDRMitigation:Update affected products to UniFi OS 3.0.13 or later.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 37.8%
CVSS Severity
CVSS v3 Score 6.5
References
Products affected by CVE-2023-28361
-
cpe:2.3:h:uni:cloud_key_gen2:-
-
cpe:2.3:h:uni:cloud_key_gen2_plus:-
-
cpe:2.3:h:uni:ubiquiti_networks_unifi_dream_machine:-
-
cpe:2.3:h:uni:ubiquiti_networks_unifi_dream_machine_professional:-
-
cpe:2.3:h:uni:ubiquiti_networks_unifi_dream_machine_se:-
-
cpe:2.3:h:uni:unifi_dream_router:-
-
cpe:2.3:h:uni:unifi_protect_network_video_recorder:-
-
cpe:2.3:h:uni:unifi_protect_network_video_recorder_professional:-
-
cpe:2.3:o:uni:unifi_os:-