CVE:CVE-2023-23912
CNNVD:CNNVD-202302-640
Ubiquiti EdgeRouters是美国优比快（Ubiquiti）公司的一系列边缘路由器。
Ubiquiti EdgeRouters 2.0.9-hotfix.5及之前版本、UniFi Security Gateways(USG) 4.4.56及之前版本存在安全漏洞，该漏洞源于允许恶意行为者直接连接到受影响设备的WAN接口以创建远程代码执行漏洞。
solution:Upgrade ui usg_firmware to a higher version than 4.4.57,and avoid the version (,4.4.57); Upgrade ui usg-pro-4_firmware to a higher version than 4.4.57,and avoid the version (,4.4.57); Upgrade ui er-10x_firmware to a higher version than 2.0.9,2.0.9,2.0.9:hotfix2,2.0.9:hotfix4,2.0.9:hotfix5,and avoid the version (,2.0.9),2.0.9,2.0.9:hotfix2,2.0.9:hotfix4,2.0.9:hotfix5; Upgrade ui er-12_firmware to a higher version than 2.0.9,2.0.9,2.0.9:hotfix2,2.0.9:hotfix4,2.0.9:hotfix5,and avoid the version (,2.0.9),2.0.9,2.0.9:hotfix2,2.0.9:hotfix4,2.0.9:hotfix5; Upgrade ui er-12p_firmware to a higher version than 2.0.9,2.0.9,2.0.9:hotfix2,2.0.9:hotfix4,2.0.9:hotfix5,and avoid the version (,2.0.9),2.0.9,2.0.9:hotfix2,2.0.9:hotfix4,2.0.9:hotfix5; Upgrade ui er-4_firmware to a higher version than 2.0.9,2.0.9,2.0.9:hotfix2,2.0.9:hotfix4,2.0.9:hotfix5,and avoid the version (,2.0.9),2.0.9,2.0.9:hotfix2,2.0.9:hotfix4,2.0.9:hotfix5; Upgrade ui er-6p_firmware to a higher version than 2.0.9,2.0.9,2.0.9:hotfix2,2.0.9:hotfix4,2.0.9:hotfix5,and avoid the version (,2.0.9),2.0.9,2.0.9:hotfix2,2.0.9:hotfix4,2.0.9:hotfix5; Upgrade ui er-8-xg_firmware to a higher version than 2.0.9,2.0.9,2.0.9:hotfix2,2.0.9:hotfix4,2.0.9:hotfix5,and avoid the version (,2.0.9),2.0.9,2.0.9:hotfix2,2.0.9:hotfix4,2.0.9:hotfix5; Upgrade ui er-x_firmware to a higher version than 2.0.9,2.0.9,2.0.9:hotfix2,2.0.9:hotfix4,2.0.9:hotfix5,and avoid the version (,2.0.9),2.0.9,2.0.9:hotfix2,2.0.9:hotfix4,2.0.9:hotfix5; Upgrade ui er-x-sfp_firmware to a higher version than 2.0.9,2.0.9,2.0.9:hotfix2,2.0.9:hotfix4,2.0.9:hotfix5,and avoid the version (,2.0.9),2.0.9,2.0.9:hotfix2,2.0.9:hotfix4,2.0.9:hotfix5