CVE-2023-31998

—

CVSS 3.1

7.5 high

EPSS

<1%p54

Published

Jul 18, 2023 (Jul 18, 2023)

Modified

Jun 17, 2026

Description

A heap overflow vulnerability found in EdgeRouters and Aircubes allows a malicious actor to interrupt UPnP service to said devices.

Vendors: ui
Products: edgemax edgerouter firmware, aircube firmware
Weakness: CWE-787, CWE-120
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news1 stories

Experts released PoC exploit for Ubiquiti EdgeRouter flaw

Security AffairsJul 10, 18:30 UTC · Jul 10, 2023Exploit / PoC CVE-2023-31998

50