UI Edgemax Edgerouter Firmware vulnerabilities

4 CVEs affecting UI Edgemax Edgerouter Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-31998, published 2023-07-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-2373, published 2023-04-28. High severity, CVSS 7.2. EPSS: 7.6% chance of exploitation in the next 30 days. A vulnerability was identified in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This vulnerability affects unknown code of the component Web Management Interface. Such manipulation of the argument…
CVE-2021-22909, published 2021-05-27. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability found in EdgeMAX EdgeRouter V2.0.9 and earlier could allow a malicious actor to execute a man-in-the-middle (MitM) attack during a firmware update. This vulnerability is fixed in…
CVE-2022-43553, published 2022-12-05. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. A remote code execution vulnerability in EdgeRouters (Version 2.0.9-hotfix.4 and earlier) allows a malicious actor with an operator account to run arbitrary administrator commands.This vulnerability…
CVE-2023-31998, published 2023-07-18. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. A heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to interrupt UPnP service to said devices.