CVE Feed

    Dashboard / CVE / CVE-2023-24104

    CVE-2023-24104

    Ubiquiti Networks UniFi Dream Machine Pro v7.2.95 allows attackers to bypass domain restrictions via crafted packets.

    Published:Feb 23, 2023
    Last Modified:Mar 18, 2025
    EPS:Feb 23, 2023
    EPSS Score:0.00028
    CVSS Score:9.8

    Affected Products

    Vendor
    Ui
    Product
    Unifi Dream Machine Pro
    Vendor
    Ui
    Product
    Unifi Dream Machine Pro Firmware

    Exploits

    https://github.com/f1veT/BUG/issues/1https://github.com/f1veT/BUG/issues/1

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-54402 (CVSS 9.9) — A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vul…
    CVE-2026-55110 (CVSS 7.5) — A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sh…
    CVE-2026-34908 (CVSS 10) — A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in U…
    CVE-2023-41721 (CVSS 5.3) — Instances of UniFi Network Application that (i) are run on a UniFi Gateway Console, and (ii) are versions 7.5.…
    CVE-2021-22882 (CVSS 7.5) — UniFi Protect before v1.17.1 allows an attacker to use spoofed cameras to perform a denial-of-service attack t…
    CVE-2020-8188 (CVSS 8.8) — We have recently released new version of UniFi Protect firmware v1.13.3 and v1.14.10 for Unifi Cloud Key Gen2 …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High