GCVE - cpe:2.3:h:ui:er-x-sfp:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:ui:er-x-sfp:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Ui (`05cd6c40-c92e-5edc-9588-6ff25fd55039`)
Product	Er X Sfp (`8c6761d1-6113-5f7c-ac92-199022c8c45f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-2379`	not_vulnerable	2026-06-08 06:02:42.202920	Ubiquiti EdgeRouter X Web Service denial of service HIGH (7.5) A vulnerability classified as critical has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This affects an unknown part of the component Web Service. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-227655. Published: 2023-04-28T16:31:03.591Z Updated: 2025-01-30T19:26:09.486Z Open on db.gcve.eu Reference links https://vuldb.com/?id.227655 https://vuldb.com/?ctiid.227655 https://github.com/leetsun/IoT/tree/main/EdgeRouterX/DoS	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-2378`	not_vulnerable	2026-06-08 06:02:42.201249	Ubiquiti EdgeRouter X Web Management command injection HIGH (7.2) A flaw has been found in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. This affects an unknown function of the component Web Management Interface. This manipulation of the argument suffix-rate-up causes command injection. The attack may be initiated remotely. The exploit has been published and may be used. The real existence of this vulnerability is still doubted at the moment. The vendor position is that post-authentication issues are not accepted as vulnerabilities. Published: 2023-04-28T16:00:04.575Z Updated: 2026-07-09T13:53:21.447Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/227654 https://vuldb.com/vuln/227654/cti https://vuldb.com/cve/CVE-2023-2378 https://vuldb.com/submit/114072 https://github.com/leetsun/IoT/tree/main/EdgeRouterX/CI/4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-2377`	not_vulnerable	2026-06-08 06:02:42.199763	Ubiquiti EdgeRouter X Web Management command injection HIGH (7.2) A vulnerability was detected in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. The impacted element is an unknown function of the component Web Management Interface. The manipulation of the argument Name results in command injection. The attack can be launched remotely. The exploit is now public and may be used. There is ongoing doubt regarding the real existence of this vulnerability. The vendor position is that post-authentication issues are not accepted as vulnerabilities. Published: 2023-04-28T15:31:03.377Z Updated: 2026-07-09T13:53:18.708Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/227653 https://vuldb.com/vuln/227653/cti https://vuldb.com/cve/CVE-2023-2377 https://vuldb.com/submit/114081 https://github.com/leetsun/IoT/tree/main/EdgeRouterX/CI/9	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-2376`	not_vulnerable	2026-06-08 06:02:42.198201	Ubiquiti EdgeRouter X Web Management command injection HIGH (7.2) A security vulnerability has been detected in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. The affected element is an unknown function of the component Web Management Interface. The manipulation of the argument dpi leads to command injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. There are still doubts about whether this vulnerability truly exists. The vendor position is that post-authentication issues are not accepted as vulnerabilities. Published: 2023-04-28T15:00:08.881Z Updated: 2026-07-09T13:53:15.750Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/227652 https://vuldb.com/vuln/227652/cti https://vuldb.com/cve/CVE-2023-2376 https://vuldb.com/submit/114078 https://github.com/leetsun/IoT/tree/main/EdgeRouterX/CI/8	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-2375`	not_vulnerable	2026-06-08 06:02:42.196539	Ubiquiti EdgeRouter X Web Management command injection HIGH (7.2) A weakness has been identified in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. Impacted is an unknown function of the component Web Management Interface. Executing a manipulation of the argument src can lead to command injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The presence of this vulnerability remains uncertain at this time. The vendor position is that post-authentication issues are not accepted as vulnerabilities. Published: 2023-04-28T15:00:07.068Z Updated: 2026-07-09T13:53:12.606Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/227651 https://vuldb.com/vuln/227651/cti https://vuldb.com/cve/CVE-2023-2375 https://vuldb.com/submit/114077 https://github.com/leetsun/IoT/tree/main/EdgeRouterX/CI/7	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-2374`	not_vulnerable	2026-06-08 06:02:42.192921	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-2373`	not_vulnerable	2026-06-08 06:02:42.181879	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-23912`	not_vulnerable	2026-06-08 05:56:04.777039	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-16889`	not_vulnerable	2026-06-08 05:13:09.483999	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.