[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$feuY0QQXZqFyF9BAgYE27MkK2_z0xSoKZjSerKyHdn_U":3,"g5a-risk:CVE-2023-31997":104},{"success":4,"data":5,"meta":101},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":30,"epssPercentile":27,"epssTimeSeries":31,"severity":32,"affectedProducts":33,"affectedProductsCount":45,"references":46,"referencesCount":52,"weaknesses":53,"weaknessesCount":52,"isActivelyExploited":57,"cisaInfo":27,"otxData":27,"relatedBlogPosts":58,"seoMetadata":59,"configurations":84,"relatedVendorCves":99,"notableEvents":100},"CVE-2023-31997","What is CVE-2023-31997?","UniFi OS 3.1 introduces a misconfiguration on consoles running UniFi Network that allows users on a local network to access MongoDB. Applicable Cloud Keys that are both (1) running UniFi OS 3.1 and (2) hosting the UniFi Network application. \"Applicable Cloud Keys\" include the following: Cloud Key Gen2 and Cloud Key Gen2 Plus.","UniFi OS 3.1 introduces a misconfiguration on consoles running UniFi Network that allows users on a local network to access MongoDB. Applicable Cloud Keys th...","2023-07-01T00:15:10.337","2023-07-11T16:19:54.627",9,"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","ADJACENT_NETWORK","LOW","NONE","CHANGED","HIGH","CRITICAL",null,2.3,6,0.00254,[30,30,30,30,30,30,30],"Critical",[34,38,42],{"vendor":35,"product":36,"version":20,"criteria":37,"vulnerable":4},"ui","unifi_os","cpe:2.3:o:ui:unifi_os:3.1:*:*:*:*:*:*:*",{"vendor":35,"product":39,"version":40,"criteria":41,"vulnerable":4},"cloud_key_gen2","-","cpe:2.3:h:ui:cloud_key_gen2:-:*:*:*:*:*:*:*",{"vendor":35,"product":43,"version":40,"criteria":44,"vulnerable":4},"cloud_key_gen2_plus","cpe:2.3:h:ui:cloud_key_gen2_plus:-:*:*:*:*:*:*:*",3,[47],{"url":48,"source":49,"tags":50},"https:\u002F\u002Fcommunity.ui.com\u002Freleases\u002FSecurity-Advisory-Bulletin-032-032\u002Fe57301f4-4f5e-4d9f-90bc-71f1923ed7a4","Ui",[51],"Issue Tracking",1,[54],{"id":55,"name":55,"description":56},"Unknown","NVD-CWE-noinfo",false,[],{"title":60,"metaDescription":61,"keywords":62,"canonicalUrl":63,"structuredData":64},"What is CVE-2023-31997? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-31997, a critical severity cyber security vulnerability from 2023. UniFi OS 3.1 introduces a misconfiguration on consoles ...","CVE-2023-31997, CVE-2023-31997 vulnerability, CVE-2023-31997 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, ui security, unifi_os vulnerability, cloud_key_gen2 vulnerability, cloud_key_gen2_plus vulnerability","\u002Fwhat-is\u002Fcve-2023-31997",{"@context":65,"@type":66,"headline":60,"description":61,"datePublished":10,"dateModified":11,"author":67,"publisher":71,"about":75,"mainEntityOfPage":79,"articleSection":82,"keywords":83},"https:\u002F\u002Fschema.org","TechArticle",{"@type":68,"name":69,"url":70},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":68,"name":69,"url":70,"logo":72},{"@type":73,"url":74},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":76,"name":6,"description":77,"additionalType":78},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":80,"@id":81},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-31997","Cybersecurity","CVE-2023-31997, CVE-2023-31997 vulnerability, CVE-2023-31997 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[85],{"Operator":86,"Negate":27,"Nodes":87},"AND",[88,93],{"Operator":89,"Negate":27,"CPEMatch":90},"OR",[91],{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":92,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"FE09B39C-8ACF-46FA-895D-69ABFD495D0B",{"Operator":89,"Negate":27,"CPEMatch":94},[95,97],{"Vulnerable":27,"Criteria":41,"MatchCriteriaID":96,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"C852E1BD-DCDD-4326-B142-20E0CE6F2B8F",{"Vulnerable":27,"Criteria":44,"MatchCriteriaID":98,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"9D8F990C-8B8C-4A7A-AC50-114DF4C7280D",[],[],{"lastModified":11,"cacheTime":102,"version":103},1792361893177,"2.0",{"score":105,"band":106,"action":107,"scoredAt":108},53,"Medium","Plan remediation","2026-10-16T06:58:25.508811+00:00"]