CVE-2023-35085critical

CVE-2023-35085: critical vulnerability in Ubiquiti Inc UniFi Access Points

Published · Updated

Follow this CVE+ Monitor UniFi Access Points+ Monitor UniFi Switches

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9epss 1.0%
An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Monitoring and default settings enabled could allow a Remote Code Execution (RCE). Affected Products: All UniFi Access Points (Version 6.5.50 and earlier) All UniFi Switches (Version 6.5.32 and earlier) -USW Flex Mini excluded. Mitigation: Update UniFi Access Points to Version 6.5.62 or later. Update the UniFi Switches to Version 6.5.59 or later.
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
Ubiquiti Inc · UniFi Access PointsUbiquiti Inc · UniFi Switches
Related CVEs — Ubiquiti Inc UniFi Access Points

In the same product, most dangerous first.

CVE-2023-38034HIGHCVE-2023-38034EPSS 1.4%CVE-2024-22054HIGHCVE-2024-22054EPSS 0.5%