CVE:CVE-2023-2373
CNNVD:CNNVD-202304-2263
Ubiquiti EdgeRouter是美国优比快（Ubiquiti）公司的一个路由器。
Ubiquiti EdgeRouter X 2.0.9-hotfix.6版本及之前版本存在命令注入漏洞，该漏洞源于对参数ecn-up的错误操作会导致命令注入。
solution:Upgrade ui edgemax_edgerouter_firmware to a higher version than 2.0.9,2.0.9,2.0.9:hotfix1,2.0.9:hotfix2,2.0.9:hotfix4,2.0.9:hotfix5,2.0.9:hotfix6,and avoid the version (,2.0.9),2.0.9,2.0.9:hotfix1,2.0.9:hotfix2,2.0.9:hotfix4,2.0.9:hotfix5,2.0.9:hotfix6