What is CVE-2023-23119?

CVE-2023-23119 is a medium-severity vulnerability in Ui Af-2x, classified under Improper Validation of Integrity Check Value. CVSS score: 5.9/10. Published 2023-02-02.

How severe is CVE-2023-23119?

Medium severity. CVSS v3 base score is 5.9 out of 10.

Vulnerability in Ui Af-2x

CVE-2023-23119

The use of the cyclic redundancy check (CRC) algorithm for integrity check during firmware update makes Ubiquiti airFiber AF2X Radio firmware version 3.2.2 and earlier vulnerable to firmware modification attacks. An attacker can conduct a man-in-the-middle (MITM) attack to modify the new firmware image and bypass the checksum verification.

EPSS: 0.003 (18.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

Ui Af-2x
Ui Af-2x_firmware
N/a — versions n/a

Weakness classification (CWE)

CWE-354 — Improper Validation of Integrity Check Value

References

cve@mitre.org (Exploit, Third Party Advisory)
cve@mitre.org (Vendor Advisory)

Frequently asked questions

What is CVE-2023-23119?: CVE-2023-23119 is a medium-severity vulnerability in Ui Af-2x, classified under Improper Validation of Integrity Check Value. CVSS score: 5.9/10. Published 2023-02-02.
How severe is CVE-2023-23119?: Medium severity. CVSS v3 base score is 5.9 out of 10.