--- title: "Ubiquiti EdgeRouter X vulnerabilities and CVEs" url: https://radicalnotion.ai/vendor/ubiquiti/edgerouter-x type: product description: "Ubiquiti EdgeRouter X has 14 published CVEs, 0 in CISA KEV and 8 with public exploits." updated: 2023-04-28 source: RadicalNotion.AI license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/) --- # Ubiquiti EdgeRouter X vulnerabilities Vendor: [Ubiquiti](https://radicalnotion.ai/vendor/ubiquiti) - **Published CVEs:** 14 - **In CISA KEV:** 0 - **With a public exploit:** 8 - **With a patch:** 7 - **Average CVSS:** 8.8 - **First CVE:** 2018-03-22 - **Latest CVE:** 2023-04-28 ## Severity breakdown | Severity | CVEs | | --- | --- | | Critical | 3 | | High | 11 | | Medium | 0 | | Low | 0 | | Unscored | 0 | ## Most common weakness types | CWE | Name | CVEs | | --- | --- | --- | | [CWE-77](https://radicalnotion.ai/cwe/cwe-77) | Improper Neutralization of Special Elements used in a Command ('Command Injection') | 9 | | [CWE-269](https://radicalnotion.ai/cwe/cwe-269) | Improper Privilege Management | 3 | | [CWE-352](https://radicalnotion.ai/cwe/cwe-352) | Cross-Site Request Forgery (CSRF) | 1 | | [CWE-404](https://radicalnotion.ai/cwe/cwe-404) | Improper Resource Shutdown or Release | 1 | ## CVEs by year | Year | CVEs published | | --- | --- | | 2018 | 4 | | 2019 | 0 | | 2020 | 0 | | 2021 | 0 | | 2022 | 0 | | 2023 | 10 | ## Affected versions | Version | Kind | CVEs | | --- | --- | --- | | 2.0.9-hotfix.0 | exact | 7 | | 2.0.9-hotfix.1 | exact | 7 | | 2.0.9-hotfix.2 | exact | 7 | | 2.0.9-hotfix.3 | exact | 7 | | 2.0.9-hotfix.4 | exact | 7 | | 2.0.9-hotfix.5 | exact | 7 | | 2.0.9-hotfix.6 | exact | 7 | | \>= 2.0.9-hotfix.6 | range | 3 | | \>= EdgeOS v1.9.1 and prior | range | 2 | | \>= EdgeOS v1.9.1.1 and prior | range | 2 | ## CVEs | CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch | | --- | --- | --- | --- | --- | --- | --- | | CVE-2023-2379 | Ubiquiti EdgeRouter X Web Service denial of service | high | 7.5 | No | Yes | Yes | | CVE-2023-2378 | Ubiquiti EdgeRouter X Web Management command injection | high | 8.6 | No | Yes | Yes | | CVE-2023-2377 | Ubiquiti EdgeRouter X Web Management command injection | high | 8.6 | No | Yes | Yes | | CVE-2023-2376 | Ubiquiti EdgeRouter X Web Management command injection | high | 8.6 | No | Yes | Yes | | CVE-2023-2375 | Ubiquiti EdgeRouter X Web Management command injection | high | 8.6 | No | Yes | Yes | | CVE-2023-2374 | Ubiquiti EdgeRouter X Web Management command injection | high | 8.6 | No | Yes | Yes | | CVE-2023-2373 | Ubiquiti EdgeRouter X Web Management command injection | high | 8.6 | No | Yes | Yes | | CVE-2023-1458 | - | critical | 9.8 | No | Yes | No | | CVE-2023-1457 | - | critical | 9.8 | No | No | No | | CVE-2023-1456 | - | critical | 9.8 | No | No | No | | CVE-2017-0935 | - | high | 8.8 | No | No | No | | CVE-2017-0934 | - | high | 8.8 | No | No | No | | CVE-2017-0933 | - | high | 8.0 | No | No | No | | CVE-2017-0932 | - | high | 8.8 | No | No | No | ## Frequently asked questions ### How many CVEs does Ubiquiti EdgeRouter X have? Ubiquiti EdgeRouter X has 14 published CVE records since 2018. ### How many Ubiquiti EdgeRouter X CVEs are in CISA KEV? None of Ubiquiti EdgeRouter X's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog. ### Are there public exploits for Ubiquiti EdgeRouter X vulnerabilities? Yes — 8 of Ubiquiti EdgeRouter X's CVEs have a known public exploit. ### Which versions of Ubiquiti EdgeRouter X are affected? 10 distinct Ubiquiti EdgeRouter X versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version. ### What are the most common weakness types in Ubiquiti EdgeRouter X CVEs? Ubiquiti EdgeRouter X's CVEs most often map to these CWE weakness types: CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')), CWE-269 (Improper Privilege Management), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-404 (Improper Resource Shutdown or Release). ### How many critical Ubiquiti EdgeRouter X vulnerabilities are there? Ubiquiti EdgeRouter X has 3 critical and 11 high-severity CVEs. ### What is the average severity of Ubiquiti EdgeRouter X CVEs? The average CVSS base score across Ubiquiti EdgeRouter X's scored CVEs is 8.8. ## Other products from this vendor - [Express 7](https://radicalnotion.ai/vendor/ubiquiti/express-7) (25 CVEs) - [UniFi OS Server](https://radicalnotion.ai/vendor/ubiquiti/unifi-os-server) (20 CVEs) - [Cloud Gateways](https://radicalnotion.ai/vendor/ubiquiti/cloud-gateways) (18 CVEs) - [Dream Machines](https://radicalnotion.ai/vendor/ubiquiti/dream-machines) (18 CVEs) - [Dream Routers](https://radicalnotion.ai/vendor/ubiquiti/dream-routers) (18 CVEs) - [Dream Wall](https://radicalnotion.ai/vendor/ubiquiti/dream-wall) (18 CVEs) - [UniFi Network Application](https://radicalnotion.ai/vendor/ubiquiti/unifi-network-application) (16 CVEs) - [Express](https://radicalnotion.ai/vendor/ubiquiti/express) (12 CVEs) --- Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/ubiquiti/edgerouter-x). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.