Medium WID-SEC-2024-1066 3 CVEs

Ubiquiti UniFi: Mehrere Schwachstellen

Published May 7, 2024 · Updated May 7, 2024 · de-DE

Vendor: Ubiquiti Product: UniFi

Summary

Ein Angreifer kann mehrere Schwachstellen in Ubiquiti UniFi ausnutzen, um Dateien zu manipulieren oder Sicherheitsmaßnahmen zu umgehen.

Product

UniFi ist Ubiquiti's End-to-End-Netzwerk-Ökosystem für Unternehmen und Smart Homes.

Vulnerabilities 3

High 7.5

CVE-2024-29207

An Improper Certificate Validation could allow a malicious actor with access to an adjacent network to take control of …

Ubiquiti UniFi Connect EV Station Pro UniFi Connect Display Cast UniFi Connect Application Network devices

May 7, 2024
Low 2.2

CVE-2024-29206

An Improper Access Control could allow a malicious actor authenticated in the API to enable Android Debug Bridge (ADB) …

Ubiquiti UniFi Connect EV Station Pro UniFi Connect Display Cast UniFi Connect Display Network devices

May 7, 2024
Low 2.2

CVE-2024-29208

An Unverified Password Change could allow a malicious actor with API access to the device to change the system password…

Ubiquiti Update UniFi Connect EV Station Pro Update UniFi Connect Display Cast Update UniFi Connect EV Station Network devices

May 7, 2024

Revision history

2024-05-07 #1
Initiale Fassung

References

Ubiquiti Security Advisory bulletin 039 vom 2024-05-07
https://community.ui.com/releases/Security-Advisory-bulletin-039-039/44e24007-2c2c-4ac0-bebf-3f19b9b24f09