Approved changes feed: RSS · Atom

cpe:2.3:o:ui:unifi_switch_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorUi (05cd6c40-c92e-5edc-9588-6ff25fd55039)
ProductUnifi Switch Firmware (802f8f22-c47f-545b-9ab0-2da8ed34ff5e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-38034 vulnerable 2026-06-08 06:08:16.772248 Details available
HIGH (8.3)
A command injection vulnerability in the DHCP Client function of all UniFi Access Points and Switches, excluding the Switch Flex Mini, could allow a Remote Code Execution (RCE). Affected Products: All UniFi Access Points (Version 6.5.53 and earlier) All UniFi Switches (Version 6.5.32 and earlier) -USW Flex Mini excluded. Mitigation: Update UniFi Access Points to Version 6.5.62 or later. Update UniFi Switches to Version 6.5.59 or later.
Published: 2023-08-10T18:58:07.647Z
Updated: 2024-12-04T16:30:27.937Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35085 vulnerable 2026-06-08 06:06:26.513577 Details available
CRITICAL (9)
An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Monitoring and default settings enabled could allow a Remote Code Execution (RCE). Affected Products: All UniFi Access Points (Version 6.5.50 and earlier) All UniFi Switches (Version 6.5.32 and earlier) -USW Flex Mini excluded. Mitigation: Update UniFi Access Points to Version 6.5.62 or later. Update the UniFi Switches to Version 6.5.59 or later.
Published: 2023-08-10T18:58:17.222Z
Updated: 2024-12-04T16:30:50.323Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44527 vulnerable 2026-06-08 05:36:46.246459 Details available
A vulnerability found in UniFi Switch firmware Version 5.43.35 and earlier allows a malicious actor who has already gained access to the network to perform a Deny of Service (DoS) attack on the affected switch.This vulnerability is fixed in UniFi Switch firmware 5.76.6 and later.
Published: 2021-12-07T13:12:26.000Z
Updated: 2024-08-04T04:25:16.471Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.