UI UniFi Switch Firmware vulnerabilities

3 CVEs affecting UI UniFi Switch Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-38034, published 2023-08-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-38034, published 2023-08-10. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. A command injection vulnerability in the DHCP Client function of all UniFi Access Points and Switches, excluding the Switch Flex Mini, could allow a Remote Code Execution (RCE). Affected…
CVE-2023-35085, published 2023-08-10. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Monitoring and default settings enabled could allow a Remote Code Execution…
CVE-2021-44527, published 2021-12-07. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability found in UniFi Switch firmware Version 5.43.35 and earlier allows a malicious actor who has already gained access to the network to perform a Deny of Service (DoS) attack on the…