CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-41721

Instances of UniFi Network Application that (i) are run on a UniFi Gateway Console, and (ii) are versions 7.5.176. and earlier, implement device adoption with improper access control logic, creating a risk of access to device configuration information by a malicious actor with preexisting access to the network. Affected Products: UDM UDM-PRO UDM-SE UDR UDW Mitigation: Update UniFi Network to Version 7.5.187 or later.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 47.1%

CVSS Severity

CVSS v3 Score 10.0

References

Products affected by CVE-2023-41721

Ui » Unifi Network Application » Version: N/A

cpe:2.3:a:ui:unifi_network_application:-
Ui » Unifi Network Application » Version: 6.2.23

cpe:2.3:a:ui:unifi_network_application:6.2.23
Ui » Unifi Network Application » Version: 6.2.25

cpe:2.3:a:ui:unifi_network_application:6.2.25
Ui » Unifi Network Application » Version: 6.2.26

cpe:2.3:a:ui:unifi_network_application:6.2.26
Ui » Unifi Network Application » Version: 6.4.54

cpe:2.3:a:ui:unifi_network_application:6.4.54
Ui » Unifi Network Application » Version: 6.5.51

cpe:2.3:a:ui:unifi_network_application:6.5.51
Ui » Unifi Network Application » Version: 6.5.52

cpe:2.3:a:ui:unifi_network_application:6.5.52
Ui » Unifi Network Application » Version: 6.5.53

cpe:2.3:a:ui:unifi_network_application:6.5.53
Ui » Unifi Network Application » Version: 6.5.54

cpe:2.3:a:ui:unifi_network_application:6.5.54
Ui » Unifi Network Application » Version: 6.5.55

cpe:2.3:a:ui:unifi_network_application:6.5.55
Ui » Unifi Network Application » Version: 7.0.20

cpe:2.3:a:ui:unifi_network_application:7.0.20
Ui » Unifi Network Application » Version: 7.0.21

cpe:2.3:a:ui:unifi_network_application:7.0.21
Ui » Unifi Network Application » Version: 7.0.22

cpe:2.3:a:ui:unifi_network_application:7.0.22
Ui » Unifi Network Application » Version: 7.0.23

cpe:2.3:a:ui:unifi_network_application:7.0.23
Ui » Unifi Network Application » Version: 7.0.25

cpe:2.3:a:ui:unifi_network_application:7.0.25
Ui » Unifi Network Application » Version: 7.1.61

cpe:2.3:a:ui:unifi_network_application:7.1.61
Ui » Unifi Network Application » Version: 7.1.65

cpe:2.3:a:ui:unifi_network_application:7.1.65
Ui » Unifi Network Application » Version: 7.1.66

cpe:2.3:a:ui:unifi_network_application:7.1.66
Ui » Unifi Network Application » Version: 7.1.67

cpe:2.3:a:ui:unifi_network_application:7.1.67
Ui » Unifi Network Application » Version: 7.1.68

cpe:2.3:a:ui:unifi_network_application:7.1.68
Ui » Unifi Network Application » Version: 7.2.91

cpe:2.3:a:ui:unifi_network_application:7.2.91
Ui » Unifi Network Application » Version: 7.2.92

cpe:2.3:a:ui:unifi_network_application:7.2.92
Ui » Unifi Network Application » Version: 7.2.93

cpe:2.3:a:ui:unifi_network_application:7.2.93
Ui » Unifi Network Application » Version: 7.2.94

cpe:2.3:a:ui:unifi_network_application:7.2.94
Ui » Unifi Network Application » Version: 7.2.95

cpe:2.3:a:ui:unifi_network_application:7.2.95
Ui » Unifi Network Application » Version: 7.2.97

cpe:2.3:a:ui:unifi_network_application:7.2.97
Ui » Unifi Network Application » Version: 7.3.76

cpe:2.3:a:ui:unifi_network_application:7.3.76
Ui » Unifi Network Application » Version: 7.3.81

cpe:2.3:a:ui:unifi_network_application:7.3.81
Ui » Unifi Network Application » Version: 7.3.83

cpe:2.3:a:ui:unifi_network_application:7.3.83
Ui » Unifi Network Application » Version: 7.4.156

cpe:2.3:a:ui:unifi_network_application:7.4.156
Ui » Unifi Network Application » Version: 7.4.162

cpe:2.3:a:ui:unifi_network_application:7.4.162
Ui » Unifi Network Application » Version: 7.5.172

cpe:2.3:a:ui:unifi_network_application:7.5.172
Ui » Unifi Network Application » Version: 7.5.174

cpe:2.3:a:ui:unifi_network_application:7.5.174
Ui » Unifi Network Application » Version: 7.5.176

cpe:2.3:a:ui:unifi_network_application:7.5.176
Ui » Unifi Dream Machine » Version: N/A

cpe:2.3:h:ui:unifi_dream_machine:-
Ui » Unifi Dream Machine Pro » Version: N/A

cpe:2.3:h:ui:unifi_dream_machine_pro:-
Ui » Unifi Dream Machine Special Edition » Version: N/A

cpe:2.3:h:ui:unifi_dream_machine_special_edition:-
Ui » Unifi Dream Router » Version: N/A

cpe:2.3:h:ui:unifi_dream_router:-
Ui » Unifi Dream Wall » Version: N/A

cpe:2.3:h:ui:unifi_dream_wall:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-41721

Products

Pricing

Contact Us