CVE:CVE-2023-2375
CNNVD:CNNVD-202304-2230
Ubiquiti EdgeRouter是美国优比快（Ubiquiti）公司的一个路由器。
Ubiquiti EdgeRouter X 2.0.9-hotfix.6版本及之前版本存在命令注入漏洞，该漏洞源于对参数src的错误操作会导致命令注入。
solution:Upgrade ui er-x_firmware to a higher version than 2.0.9,2.0.9,2.0.9:hotfix2,2.0.9:hotfix3,2.0.9:hotfix4,2.0.9:hotfix5,2.0.9:hotfix6,and avoid the version (,2.0.9),2.0.9,2.0.9:hotfix2,2.0.9:hotfix3,2.0.9:hotfix4,2.0.9:hotfix5,2.0.9:hotfix6; Upgrade ui er-x-sfp_firmware to a higher version than 2.0.9,2.0.9,2.0.9:hotfix2,2.0.9:hotfix3,2.0.9:hotfix4,2.0.9:hotfix5,2.0.9:hotfix6,and avoid the version (,2.0.9),2.0.9,2.0.9:hotfix2,2.0.9:hotfix3,2.0.9:hotfix4,2.0.9:hotfix5,2.0.9:hotfix6