CVEvulnerability

CVE-2023-23119

5.9 MEDIUM Published 2023-02-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-02-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-354

Description

The use of the cyclic redundancy check (CRC) algorithm for integrity check during firmware update makes Ubiquiti airFiber AF2X Radio firmware version 3.2.2 and earlier vulnerable to firmware modification attacks. An attacker can conduct a man-in-the-middle (MITM) attack to modify the new firmware image and bypass the checksum verification.

Affected configurations

• ui af-2x firmware (< 3.2.2)

Related

Weakness · CWE (1)

  • CWE-354 Improper Validation of Integrity Check Value weakness

References