CVE-2023-35085 - CVE House
Back to Database
Status published Critical CVE-2023-35085

An integer overflow vulnerability in all UniFi Access Points and...

Vulnerability Description

An integer overflow vulnerability in all UniFi Access Points and Switches, excluding the Switch Flex Mini, with SNMP Monitoring and default settings enabled could allow a Remote Code Execution (RCE). Affected Products: All UniFi Access Points (Version 6.5.50 and earlier) All UniFi Switches (Version 6.5.32 and earlier) -USW Flex Mini excluded. Mitigation: Update UniFi Access Points to Version 6.5.62 or later. Update the UniFi Switches to Version 6.5.59 or later.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-35085

Credits & Attribution

No credits recorded in the NVD database.

References

More from Ubiquiti Inc

View All →
CVE-2025-59467
A Cross-Site Scripting (XSS) vulnerability in the UCRM Argentina AFIP...
High 7.5
CVE-2025-52665
A malicious actor with access to the management network could...
Unknown 0
CVE-2025-52663
A vulnerability was identified in certain UniFi Talk devices where...
Unknown 0
CVE-2025-48979
An Improper Input Validation in UISP Application could allow a...
Unknown 0
CVE-2025-48978
An Improper Input Validation in EdgeMAX EdgeSwitch (Version 1.11.0 and...
Unknown 0

Affected Vendor

Ubiquiti Inc

View all reports →

Affected Software

UniFi Access Points, UniFi Switches
Vulnerable Versions:
6.5.50, 6.5.32

Timeline

Official Publish: August 10th, 2023
Last Modified: December 4th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.