What’s Vulnerable › Vulnerabilities

CVE-2023-24104

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-02-23 · updated 2026-06-17

Description

Ubiquiti Networks UniFi Dream Machine Pro v7.2.95 allows attackers to bypass domain restrictions via crafted packets.

Affected products

• Ui Unifi Dream Machine Pro Firmware: 7.2.95

References

• https://attack.mitre.org/techniques/T1090/004/
• https://github.com/f1veT/BUG/issues/1
• https://attack.mitre.org/techniques/T1090/004/
• https://github.com/f1veT/BUG/issues/1

Get alerted when CVE-2023-24104 or the next vulnerability affects your stack