[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fvGDPoTEp0zeg6kpG-K1S_iW4DS8qVFib-eTBFLYVD9I":3,"g5a-risk:CVE-2023-41721":137},{"success":4,"data":5,"meta":134},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":41,"epssPercentile":26,"epssTimeSeries":42,"severity":43,"affectedProducts":44,"affectedProductsCount":40,"references":66,"referencesCount":73,"weaknesses":74,"weaknessesCount":73,"isActivelyExploited":83,"cisaInfo":26,"otxData":26,"relatedBlogPosts":84,"seoMetadata":85,"configurations":110,"relatedVendorCves":132,"notableEvents":133},"CVE-2023-41721","What is CVE-2023-41721?","Instances of UniFi Network Application that (i) are run on a UniFi Gateway Console, and (ii) are versions 7.5.176. and earlier, implement device adoption with improper access control logic, creating a risk of access to device configuration information by a malicious actor with preexisting access to the network.\n\nAffected Products:\nUDM\nUDM-PRO\nUDM-SE\nUDR\nUDW\n \nMitigation:\nUpdate UniFi Network to Version 7.5.187 or later.","Instances of UniFi Network Application that (i) are run on a UniFi Gateway Console, and (ii) are versions 7.5.176. and earlier, implement device adoption wit...","2023-10-25T18:17:30.987","2024-09-10T21:35:05.073",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":26,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,3.9,1.4,[30],{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":27,"ImpactScore":40},"support@hackerone.com","Secondary",{"Version":34,"VectorString":35,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":36,"ConfidentialityImpact":37,"IntegrityImpact":37,"AvailabilityImpact":37,"BaseScore":38,"BaseSeverity":39,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.0","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H","CHANGED","HIGH",10,"CRITICAL",6,0.00629,[41,41,41,41,41,41,41],"Medium",[45,50,54,57,60,63],{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"ui","unifi_network_application","*","cpe:2.3:a:ui:unifi_network_application:*:*:*:*:*:*:*:*",{"vendor":46,"product":51,"version":52,"criteria":53,"vulnerable":4},"unifi_dream_machine","-","cpe:2.3:h:ui:unifi_dream_machine:-:*:*:*:*:*:*:*",{"vendor":46,"product":55,"version":52,"criteria":56,"vulnerable":4},"unifi_dream_machine_pro","cpe:2.3:h:ui:unifi_dream_machine_pro:-:*:*:*:*:*:*:*",{"vendor":46,"product":58,"version":52,"criteria":59,"vulnerable":4},"unifi_dream_machine_special_edition","cpe:2.3:h:ui:unifi_dream_machine_special_edition:-:*:*:*:*:*:*:*",{"vendor":46,"product":61,"version":52,"criteria":62,"vulnerable":4},"unifi_dream_router","cpe:2.3:h:ui:unifi_dream_router:-:*:*:*:*:*:*:*",{"vendor":46,"product":64,"version":52,"criteria":65,"vulnerable":4},"unifi_dream_wall","cpe:2.3:h:ui:unifi_dream_wall:-:*:*:*:*:*:*:*",[67],{"url":68,"source":69,"tags":70},"https:\u002F\u002Fcommunity.ui.com\u002Freleases\u002FSecurity-Advisory-Bulletin-036-036\u002F81367bc9-2a64-4435-95dc-bbe482457615","Ui",[71,72],"Issue Tracking","Vendor Advisory",1,[75],{"id":76,"name":77,"description":78,"extendedDescription":79,"status":80,"abstraction":81,"structure":82},"CWE-284","Improper Access Control","The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.","Access control involves the use of several protection mechanisms such as:\nWhen any mechanism is not applied or otherwise fails, attackers can compromise the security of the product by gaining privileges, reading sensitive information, executing commands, evading detection, etc.\nThere are two distinct behaviors that can introduce access control weaknesses:","Incomplete","Pillar","Simple",false,[],{"title":86,"metaDescription":87,"keywords":88,"canonicalUrl":89,"structuredData":90},"What is CVE-2023-41721? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-41721, a medium severity cyber security vulnerability from 2023. Instances of UniFi Network Application that (i) are run o...","CVE-2023-41721, CVE-2023-41721 vulnerability, CVE-2023-41721 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, ui security, unifi_network_application vulnerability, unifi_dream_machine vulnerability, unifi_dream_machine_pro vulnerability, unifi_dream_machine_special_edition vulnerability, unifi_dream_router vulnerability","\u002Fwhat-is\u002Fcve-2023-41721",{"@context":91,"@type":92,"headline":86,"description":87,"datePublished":10,"dateModified":11,"author":93,"publisher":97,"about":101,"mainEntityOfPage":105,"articleSection":108,"keywords":109},"https:\u002F\u002Fschema.org","TechArticle",{"@type":94,"name":95,"url":96},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":94,"name":95,"url":96,"logo":98},{"@type":99,"url":100},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":102,"name":6,"description":103,"additionalType":104},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":106,"@id":107},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-41721","Cybersecurity","CVE-2023-41721, CVE-2023-41721 vulnerability, CVE-2023-41721 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[111],{"Operator":112,"Negate":26,"Nodes":113},"AND",[114,120],{"Operator":115,"Negate":26,"CPEMatch":116},"OR",[117],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":118,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":119},"9E3DE617-CF3A-415A-A504-5735D8FF35E5","7.5.176",{"Operator":115,"Negate":26,"CPEMatch":121},[122,124,126,128,130],{"Vulnerable":26,"Criteria":53,"MatchCriteriaID":123,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"33E04DDA-88A0-47C1-8AE2-2F59B1A08BAF",{"Vulnerable":26,"Criteria":56,"MatchCriteriaID":125,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B493983E-8632-4492-9B0A-E8E11E0E0BB2",{"Vulnerable":26,"Criteria":59,"MatchCriteriaID":127,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DEF52155-86F1-458A-8B7E-355B67C5C819",{"Vulnerable":26,"Criteria":62,"MatchCriteriaID":129,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B1FF6A5E-A223-4F57-9FFD-F2AE473B3627",{"Vulnerable":26,"Criteria":65,"MatchCriteriaID":131,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A9B6514E-2878-4AEE-BF1E-08B804C069FE",[],[],{"lastModified":11,"cacheTime":135,"version":136},1792370946700,"2.0",{"score":138,"band":139,"action":140,"scoredAt":141},21,"Low","Monitor","2026-10-16T06:59:33.62113+00:00"]