CVE-2023-35085

An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Monitoring and default settings enabled could allow a Remote Code Execution (RCE). Affected Products:All UniFi Access Points (Version 6.5.50 and earlier)All UniFi Switches (Version 6.5.32 and earlier) -USW Flex Mini excluded. Mitigation:Update UniFi Access Points to Version 6.5.62 or later.Update the UniFi Switches to Version 6.5.59 or later.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v3.0

9.0 CRITICALCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS

1.04% chance of exploitation in the next 30 days, 62th percentile

Published

2023-08-10

Updated

2024-12-04

Proof-of-concept exploits (1)

• maoruiQa/CVE-2023-35085-POC-EXP1★ · 2025-04-14

References

• CVE Record
• NVD entry

Related

• CVE-2023-35082
• CVE-2023-35086
• CVE-2023-35080
• CVE-2023-3509
• CVE-2023-3508
• CVE-2023-3510