CVE-2013-3572

MEDIO 6.1CVE-2013-3572 · Published 31/12/2013 · updated 16/06/2026

En resumen

CVE-2013-3572 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a unifi controller (ui).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.6%, mayor que el 76.5% de las vulnerabilidades.
Solución: actualizar a 2.3.6 o posterior.

Package	Affected versions	Patched versions
unifi controller ui	`< 2.3.6`	`2.3.6`

Description

Cross-site scripting (XSS) vulnerability in the administer interface in the UniFi Controller in Ubiquiti Networks UniFi 2.3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted client hostname.

References

dl.ubnt.com/unifi/static/cve-2013-3572.html · Vendor Advisory
spaceblogs.org/shackspace/2013/10/shackspace-hacker-finds-flaw-in-ubiquiti-networks-unifi-products · Broken Link
securityfocus.com/bid/64601 · Broken Link
community.ubnt.com/t5/UniFi/Security-Advisory-CVE-2013-3572/m-p/601047 · Vendor Advisory

Más vulnerabilidades de unifi controller

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

unifi controller

< 2.3.6

2.3.6

Más vulnerabilidades de unifi controller

Ver todo →