CVE-2023-28365

CVSS 3.1 Score 9.1 of 10 (high)

Details

Published Jul 1, 2023
Updated: Jul 10, 2023
CWE ID 77

Summary

CVE-2023-28365 is a serious vulnerability affecting UniFi applications running on Linux operating systems (Version 7.3.83 and earlier). This issue enables application administrators to execute malicious commands during the backup file restoration process. By exploiting this weakness, attackers can potentially gain unauthorized access to the host device, leading to significant security risks. Unpatched UniFi installations are vulnerable to this attack, highlighting the importance of timely software updates to maintain cybersecurity.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share