What is CVE-2023-31997?

CVE-2023-31997 is a critical-severity vulnerability in Ubiquiti Inc. Unifi Os, classified under Incorrect Authorization. CVSS score: 9.0/10. Published 2023-07-01.

How severe is CVE-2023-31997?

Critical severity. CVSS v3 base score is 9.0 out of 10.

Auth bypass in Ubiquiti Inc. Unifi Os

CVE-2023-31997

UniFi OS 3.1 introduces a misconfiguration on consoles running UniFi Network that allows users on a local network to access MongoDB. Applicable Cloud Keys that are both (1) running UniFi OS 3.1 and (2) hosting the UniFi Network application. "Applicable Cloud Keys" include the following: Cloud Key Gen2 and Cloud Key Gen2 Plus.

Vulnerability class: Broken Access Control

EPSS: 0.003 (16.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.0 (Critical). Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.

Affected products

Ubiquiti Inc. Unifi Os — versions 3.1.13
Ui Cloud_key_gen2
Ui Cloud_key_gen2_plus
Ui Unifi_os — versions 3.1

Weakness classification (CWE)

CWE-863 — Incorrect Authorization

References

support@hackerone.com (Issue Tracking)

Frequently asked questions

What is CVE-2023-31997?: CVE-2023-31997 is a critical-severity vulnerability in Ubiquiti Inc. Unifi Os, classified under Incorrect Authorization. CVSS score: 9.0/10. Published 2023-07-01.
How severe is CVE-2023-31997?: Critical severity. CVSS v3 base score is 9.0 out of 10.