Summary
Ein entfernter anonymer Angreifer oder ein Angreifer aus einem angrenzenden Netzwerk kann mehrere Schwachstellen in Ubiquiti UniFi ausnutzen, um beliebigen Code auszuführen, Daten zu manipulieren und Sicherheitsmaßnahmen zu umgehen.
Product
UniFi ist Ubiquiti's End-to-End-Netzwerk-Ökosystem für Unternehmen und Smart Homes.
Vulnerabilities 5
-
Critical 9.6
An Authentication Bypass vulnerability on UniFi Protect Application with Auto-Adopt Bridge Devices enabled could allow …
-
Critical 9.0
A Use After Free vulnerability on UniFi Protect Cameras could allow a Remote Code Execution (RCE) by a malicious actor …
-
High 7.5
An Improper Neutralization of Escape Sequences vulnerability could allow an Authentication Bypass with a Remote Code Ex…
-
Medium 6.8
An Insufficient Firmware Update Validation vulnerability could allow an authenticated malicious actor with access to Un…
-
Medium 6.4
An Improper Certificate Validation vulnerability could allow an authenticated malicious actor with access to UniFi Prot…
Revision history
-
#2
Schreibfehler korrigiert
-
#1
Initiale Fassung
References
-
Ubiquiti Security Advisory Bulletin 046 vom 2025-02-18
https://community.ui.com/releases/Security-Advisory-Bulletin-046-046/9649ea8f-93db-4713-a875-c3fd7614943f