CVE-2023-23912

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2023-02-09 · updated 2026-06-17
Weakness: CWE-75

Description

A vulnerability, found in EdgeRouters Version 2.0.9-hotfix.5 and earlier and UniFi Security Gateways (USG) Version 4.4.56 and earlier with their DHCPv6 prefix delegation set to dhcpv6-stateless or dhcpv6-stateful, allows a malicious actor directly connected to the WAN interface of an affected device to create a remote code execution vulnerability.

Affected products

Ui Er-10X Firmware: before 2.0.9; 2.0.9, 2.0.9-hotfix2, 2.0.9-hotfix4, 2.0.9-hotfix5 — fixed in 2.0.9
Ui Er-12 Firmware: before 2.0.9; 2.0.9, 2.0.9-hotfix2, 2.0.9-hotfix4, 2.0.9-hotfix5 — fixed in 2.0.9
Ui Er-12P Firmware: before 2.0.9; 2.0.9, 2.0.9-hotfix2, 2.0.9-hotfix4, 2.0.9-hotfix5 — fixed in 2.0.9
Ui Er-4 Firmware: before 2.0.9; 2.0.9, 2.0.9-hotfix2, 2.0.9-hotfix4, 2.0.9-hotfix5 — fixed in 2.0.9
Ui Er-6P Firmware: before 2.0.9; 2.0.9, 2.0.9-hotfix2, 2.0.9-hotfix4, 2.0.9-hotfix5 — fixed in 2.0.9
Ui Er-8-Xg Firmware: before 2.0.9; 2.0.9, 2.0.9-hotfix2, 2.0.9-hotfix4, 2.0.9-hotfix5 — fixed in 2.0.9
Ui Er-X-Sfp Firmware: before 2.0.9; 2.0.9, 2.0.9-hotfix2, 2.0.9-hotfix4, 2.0.9-hotfix5 — fixed in 2.0.9
Ui Er-X Firmware: before 2.0.9; 2.0.9, 2.0.9-hotfix2, 2.0.9-hotfix4, 2.0.9-hotfix5 — fixed in 2.0.9
Ui Usg-Pro-4 Firmware: before 4.4.57 — fixed in 4.4.57
Ui Usg Firmware: before 4.4.57 — fixed in 4.4.57

How to fix

Upgrade to a fixed version: Ui Er-10X Firmware 2.0.9; Ui Er-12 Firmware 2.0.9; Ui Er-12P Firmware 2.0.9; Ui Er-4 Firmware 2.0.9; Ui Er-6P Firmware 2.0.9; Ui Er-8-Xg Firmware 2.0.9; Ui Er-X-Sfp Firmware 2.0.9; Ui Er-X Firmware 2.0.9; Ui Usg-Pro-4 Firmware 4.4.57; Ui Usg Firmware 4.4.57. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-23912 or the next vulnerability affects your stack