ui edgemax edgerouter firmware

Name: ui edgemax edgerouter firmware
Brand: ui

productUS

cpe:2.3:o:ui:edgemax_edgerouter_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical4high0medium0low

updated 2026-10-24

vulnerabilities (4)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-2373US	high7.2	7.62% (95th)	—	2.0.9	2023-04-28	2 versions
CVE-2021-22909US	high7.5	1.29% (70th)	—	no fix	2021-05-27	≤ 2.0.9
CVE-2022-43553US	high8.8	1.13% (66th)	—	2.0.9	2022-12-05	2 versions
CVE-2023-31998US	high7.5	0.80% (56th)	—	no fix	2023-07-18	= 2.0.9

The flaw types (CWEs) most of these CVEs share.

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-122Heap-based Buffer Overflow1 CVEs
CWE-250Execution with Unnecessary Privileges1 CVEs
CWE-295Improper Certificate Validation1 CVEs
CWE-300Channel Accessible by Non-Endpoint1 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')1 CVEs
CWE-787Out-of-bounds Write1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.