CVE-2023-2377

CVE-2023-2377 is a critical command injection vulnerability affecting the Web Management Interface of Ubiquiti EdgeRouter X devices, specifically firmware versions up to 2.0.9-hotfix.6. This flaw allows a remote attacker to execute arbitrary commands by manipulating the 'name' argument. The vulnerability carries a CVSS score of 8.8 (High), indicating a severe risk with a low attack complexity and high impact on confidentiality, integrity, and availability. Authentication is required for exploitation, but the attack can be launched remotely. While the exploit has been publicly disclosed, there is no evidence of active exploitation in the wild, nor are there readily available Metasploit, Nuclei, or ExploitDB modules. Community discussion and media coverage for this CVE are currently minimal.