CVE-2023-23912
Estado: ModificadaAlta (8.8)—
A vulnerability, found in EdgeRouters Version 2.0.9-hotfix.5 and earlier and UniFi Security Gateways (USG) Version 4.4.56 and earlier with their DHCPv6 prefix delegation set to dhcpv6-stateless or dhcpv6-stateful, allows a malicious actor directly connected to the WAN interface of an affected device to create a remote code execution vulnerability.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 8.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.96%
- Percentil entre todas las CVEs puntuadas: 60
- Fecha de la puntuación: 3/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (10)
CWE
- CWE-75
- CWE-94
- CWE-94
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2023-23912",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2023-23912",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2025-03-24T19:01:41.360781Z"
}
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 8.8,
"attackVector": "ADJACENT_NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 2.8
},
{
"type": "Secondary",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 8.8,
"attackVector": "ADJACENT_NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "support@hackerone.com",
"affectedData": [
{
"vendor": "n/a",
"product": "Ubiquiti EdgeRouter(s) and USG(s)",
"versions": [
{
"status": "affected",
"version": "EdgeRouter(s) Version 2.0.9-hotfix.6 or later and USG(s) to Version 4.4.57 or later"
}
]
}
]
}
],
"published": "2023-02-09T20:15:11.740",
"references": [
{
"url": "https://community.ui.com/releases/Security-Advisory-Bulletin-028-028/696e4e3b-718c-4da4-9a21-965a85633b5f",
"tags": [
"Exploit",
"Patch",
"Vendor Advisory"
],
"source": "support@hackerone.com"
},
{
"url": "https://community.ui.com/releases/Security-Advisory-Bulletin-028-028/696e4e3b-718c-4da4-9a21-965a85633b5f",
"tags": [
"Exploit",
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "support@hackerone.com",
"description": [
{
"lang": "en",
"value": "CWE-75"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-94"
}
]
},
{
"type": "Secondary",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"description": [
{
"lang": "en",
"value": "CWE-94"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability, found in EdgeRouters Version 2.0.9-hotfix.5 and earlier and UniFi Security Gateways (USG) Version 4.4.56 and earlier with their DHCPv6 prefix delegation set to dhcpv6-stateless or dhcpv6-stateful, allows a malicious actor directly connected to the WAN interface of an affected device to create a remote code execution vulnerability."
}
],
"lastModified": "2026-06-17T05:38:15.520",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ui:usg_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "42EEFED0-A2A2-4331-A87A-A181742D0550",
"versionEndExcluding": "4.4.57"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ui:usg:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "59478336-F60A-4963-A3E3-89B04A119223"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ui:usg-pro-4_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7074B37B-FBD0-4484-96FA-15F51661CBD7",
"versionEndExcluding": "4.4.57"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ui:usg-pro-4:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D357AC52-6588-45F2-ACAC-165B4C97F464"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ui:er-10x_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0443C2FC-354E-47A1-A73B-912DD16EA216",
"versionEndExcluding": "2.0.9"
},
{
"criteria": "cpe:2.3:o:ui:er-10x_firmware:2.0.9:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "91B1E29D-7EEA-42BE-BB73-2EDF0DF1D7B5"
},
{
"criteria": "cpe:2.3:o:ui:er-10x_firmware:2.0.9:hotfix2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C20F448-B93A-49CA-BB13-FBCB08BB9D4F"
},
{
"criteria": "cpe:2.3:o:ui:er-10x_firmware:2.0.9:hotfix4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B0CC4F6A-660D-4EED-886D-63E8EA9723B4"
},
{
"criteria": "cpe:2.3:o:ui:er-10x_firmware:2.0.9:hotfix5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "32E6424A-4E41-4DDA-A8FE-66C0DE007623"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ui:er-10x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "257D043B-BBD0-45D5-AEA4-32DC720F3C2B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ui:er-12_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0FAD0529-AA21-48D4-86CC-663381C8C211",
"versionEndExcluding": "2.0.9"
},
{
"criteria": "cpe:2.3:o:ui:er-12_firmware:2.0.9:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E80E56E-A867-40F0-B5E7-B4B0CE4F912F"
},
{
"criteria": "cpe:2.3:o:ui:er-12_firmware:2.0.9:hotfix2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "12E1323D-1078-4501-A8FD-7DB263F2411E"
},
{
"criteria": "cpe:2.3:o:ui:er-12_firmware:2.0.9:hotfix4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0D6756AB-F23F-4060-B38F-DBAA0BC8733B"
},
{
"criteria": "cpe:2.3:o:ui:er-12_firmware:2.0.9:hotfix5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B10F7FBC-3274-4CB7-AA87-72C2B43DA457"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ui:er-12:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0A7DEE4B-D49C-4D11-9AA8-3F422DDF8964"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ui:er-12p_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "80B96493-2E6D-4F9E-AD41-CD1AB46C0650",
"versionEndExcluding": "2.0.9"
},
{
"criteria": "cpe:2.3:o:ui:er-12p_firmware:2.0.9:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D99F46FE-6FA5-4995-B9AB-6DA45AC6AC84"
},
{
"criteria": "cpe:2.3:o:ui:er-12p_firmware:2.0.9:hotfix2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AB366C51-77CB-4DA9-957B-873A814EFAD8"
},
{
"criteria": "cpe:2.3:o:ui:er-12p_firmware:2.0.9:hotfix4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9015D609-89CF-4296-9E79-24E39F4C6AA0"
},
{
"criteria": "cpe:2.3:o:ui:er-12p_firmware:2.0.9:hotfix5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FA39BE0A-9BEA-4578-87E6-AD2402DBC101"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ui:er-12p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "510797FB-103E-43D3-843B-5330716A13F5"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ui:er-4_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DA799FF3-1F2A-421D-AB8C-1078F82EA42C",
"versionEndExcluding": "2.0.9"
},
{
"criteria": "cpe:2.3:o:ui:er-4_firmware:2.0.9:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E0E5186F-3777-4A48-B26C-B2E9ADDA5142"
},
{
"criteria": "cpe:2.3:o:ui:er-4_firmware:2.0.9:hotfix2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "98E75674-504E-4F23-A326-C3257C3B8A2E"
},
{
"criteria": "cpe:2.3:o:ui:er-4_firmware:2.0.9:hotfix4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0D425830-846B-4DE1-A894-C5204B2FB38E"
},
{
"criteria": "cpe:2.3:o:ui:er-4_firmware:2.0.9:hotfix5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A40D50F4-2207-4A04-B9A1-62B0E8A93C88"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ui:er-4:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C0DBDD16-1FDE-45FA-9A5C-44BCF44D70FB"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ui:er-6p_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F2A602FE-52D8-4532-B251-7B297D48DBC2",
"versionEndExcluding": "2.0.9"
},
{
"criteria": "cpe:2.3:o:ui:er-6p_firmware:2.0.9:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4EB4D4A9-F899-4F48-BE36-DF0EF01D54F3"
},
{
"criteria": "cpe:2.3:o:ui:er-6p_firmware:2.0.9:hotfix2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "49C9FDF4-38A0-4F3F-A254-C23124E9C815"
},
{
"criteria": "cpe:2.3:o:ui:er-6p_firmware:2.0.9:hotfix4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1DDE4F7A-0BB2-4160-845C-D98005B48616"
},
{
"criteria": "cpe:2.3:o:ui:er-6p_firmware:2.0.9:hotfix5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3C15499E-CEE1-4E40-8288-243FAE540B99"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ui:er-6p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E9EA558B-7CF3-4CD0-8D73-A6BC646948C9"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ui:er-8-xg_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "136672C3-79AD-4CBE-B4D1-22D5CCA49358",
"versionEndExcluding": "2.0.9"
},
{
"criteria": "cpe:2.3:o:ui:er-8-xg_firmware:2.0.9:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE42C156-EAD4-4594-A45C-3445396D085F"
},
{
"criteria": "cpe:2.3:o:ui:er-8-xg_firmware:2.0.9:hotfix2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B9DFC719-7376-482C-8406-8F8B4903F3B9"
},
{
"criteria": "cpe:2.3:o:ui:er-8-xg_firmware:2.0.9:hotfix4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C4B6811C-71A1-4E80-B4E1-146D6712FF06"
},
{
"criteria": "cpe:2.3:o:ui:er-8-xg_firmware:2.0.9:hotfix5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D680162-9253-49E6-8907-EEE0EF59517B"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ui:er-8-xg:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EBB1CDE7-F121-4D6A-A729-C6A1F27100E8"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ui:er-x_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5E5C7E0B-4335-44F0-A19F-6E68D9CFD5AF",
"versionEndExcluding": "2.0.9"
},
{
"criteria": "cpe:2.3:o:ui:er-x_firmware:2.0.9:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9DB3EE14-A555-4DCA-9C16-F3D72489F10C"
},
{
"criteria": "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2844D28C-FAD9-498A-93FF-7A4A217210A8"
},
{
"criteria": "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B0473F8F-8D1E-4CEB-A7FC-979F3F3AAF29"
},
{
"criteria": "cpe:2.3:o:ui:er-x_firmware:2.0.9:hotfix5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C5D34B1D-9F1F-4A1F-A76C-FB4EE83D08F7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ui:er-x:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "91B9AD72-BF39-4731-85B9-26036F7C425B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:ui:er-x-sfp_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "34DA36D8-F0BD-4E98-A74C-5D50AD0980C5",
"versionEndExcluding": "2.0.9"
},
{
"criteria": "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "906F4A72-7C6D-45FD-875F-2D2791CE9F4A"
},
{
"criteria": "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B919E33F-AC70-432C-A3F8-29FDFC710BB0"
},
{
"criteria": "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FFEE96EB-D8AE-4B23-B090-E86FBA4BEF73"
},
{
"criteria": "cpe:2.3:o:ui:er-x-sfp_firmware:2.0.9:hotfix5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "101616F2-CA1A-4BF0-9025-F20EDA26F235"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:ui:er-x-sfp:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4F922D6E-7C6D-4984-A0DF-6EDC0C7A9900"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "support@hackerone.com"
}