UI Er-X-Sfp Firmware vulnerabilities

8 CVEs affecting UI Er-X-Sfp Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-2379, published 2023-04-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-2375, published 2023-04-28. High severity, CVSS 7.2. EPSS: 9.3% chance of exploitation in the next 30 days. A weakness has been identified in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. Impacted is an unknown function of the component Web Management Interface. Executing a manipulation of the argument src…
CVE-2023-2378, published 2023-04-28. High severity, CVSS 7.2. EPSS: 7.6% chance of exploitation in the next 30 days. A flaw has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This affects an unknown function of the component Web Management Interface. This manipulation of the argument suffix-rate-up…
CVE-2023-2377, published 2023-04-28. High severity, CVSS 7.2. EPSS: 7.6% chance of exploitation in the next 30 days. A vulnerability was detected in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. The impacted element is an unknown function of the component Web Management Interface. The manipulation of the argument…
CVE-2023-2376, published 2023-04-28. High severity, CVSS 7.2. EPSS: 7.6% chance of exploitation in the next 30 days. A security vulnerability has been detected in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. The affected element is an unknown function of the component Web Management Interface. The manipulation of…
CVE-2023-2374, published 2023-04-28. High severity, CVSS 7.2. EPSS: 6.9% chance of exploitation in the next 30 days. A security flaw has been discovered in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This issue affects some unknown processing of the component Web Management Interface. Performing a manipulation of…
CVE-2019-16889, published 2019-09-25. High severity, CVSS 7.5. EPSS: 5.1% chance of exploitation in the next 30 days. Ubiquiti EdgeMAX devices before 2.0.3 allow remote attackers to cause a denial of service (disk consumption) because *.cache files in /var/run/beaker/container_file/ are created when providing a…
CVE-2023-2379, published 2023-04-28. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This affects an unknown part of the component Web Service. The manipulation leads to denial of…
CVE-2023-23912, published 2023-02-09. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability, found in EdgeRouters Version 2.0.9-hotfix.5 and earlier and UniFi Security Gateways (USG) Version 4.4.56 and earlier with their DHCPv6 prefix delegation set to dhcpv6-stateless or…