Approved changes feed: RSS · Atom

cpe:2.3:h:ui:usw-24:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorUi (05cd6c40-c92e-5edc-9588-6ff25fd55039)
ProductUsw 24 (8fe684f3-7484-5fc1-8e8b-5911a3ea07f1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-38034 not_vulnerable 2026-06-03 14:52:30.207250 Details available
HIGH (8.3)
A command injection vulnerability in the DHCP Client function of all UniFi Access Points and Switches, excluding the Switch Flex Mini, could allow a Remote Code Execution (RCE). Affected Products: All UniFi Access Points (Version 6.5.53 and earlier) All UniFi Switches (Version 6.5.32 and earlier) -USW Flex Mini excluded. Mitigation: Update UniFi Access Points to Version 6.5.62 or later. Update UniFi Switches to Version 6.5.59 or later.
Published: 2023-08-10T18:58:07.647Z
Updated: 2024-12-04T16:30:27.937Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35085 not_vulnerable 2026-06-03 14:52:17.736554 Details available
CRITICAL (9)
An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Monitoring and default settings enabled could allow a Remote Code Execution (RCE). Affected Products: All UniFi Access Points (Version 6.5.50 and earlier) All UniFi Switches (Version 6.5.32 and earlier) -USW Flex Mini excluded. Mitigation: Update UniFi Access Points to Version 6.5.62 or later. Update the UniFi Switches to Version 6.5.59 or later.
Published: 2023-08-10T18:58:17.222Z
Updated: 2024-12-04T16:30:50.323Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.