CVE-2023-31997:
0.0
CVSS
Description
UniFi OS 3.1 introduces a misconfiguration on consoles running UniFi Network that allows users on a local network to access MongoDB. Applicable Cloud Keys that are both (1) running UniFi OS 3.1 and (2) hosting the UniFi Network application. "Applicable Cloud Keys" include the following: Cloud Key Gen2 and Cloud Key Gen2 Plus.
Classification
CVE ID: CVE-2023-31997
CVSS Base Severity: LOW
CVSS Base Score: 0.0
Affected Products
Vendor: Ubiquiti Inc.
Product: UniFi OS
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 14.88% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)