High WID-SEC-2025-1735 4 CVEs

Ubiquiti UniFi: Mehrere Schwachstellen

Published Aug 6, 2025 · Updated Aug 24, 2025 · Revision 3 · de-DE

Vendor: Ubiquiti Product: UniFi

Summary

Ein Angreifer kann mehrere Schwachstellen in Ubiquiti UniFi ausnutzen, um beliebigen Programmcode auszuführen und um Daten zu manipulieren.

Product

UniFi ist Ubiquiti's End-to-End-Netzwerk-Ökosystem für Unternehmen und Smart Homes.

Vulnerabilities 4

Critical 9.8

CVE-2025-24285

Multiple Improper Input Validation vulnerabilities in UniFi Connect EV Station Lite may allow a Command Injection by a …

Ubiquiti UniFi Connect EV Station Lite Network devices

Aug 21, 2025
Critical 9.8

CVE-2025-27214

A Missing Authentication for Critical Function vulnerability in the UniFi Connect EV Station Pro may allow a malicious …

Ubiquiti UniFi Connect EV Station Pro Network devices

Aug 21, 2025
High 8.1

CVE-2025-27215

An Improper Access Control could allow a malicious actor authenticated in the API of certain UniFi Connect Display Cast…

Ubiquiti UniFi Connect Display Cast UniFi Connect Display Cast Pro UniFi Connect Display Cast Lite Network devices

Aug 21, 2025
Medium 4.9

CVE-2025-27213

An Improper Access Control could allow a malicious actor authenticated in the API of certain UniFi Connect devices to e…

Ubiquiti UniFi Connect EV Station Pro UniFi Connect Display Cast UniFi Connect Display Cast Pro Network devices

Aug 21, 2025

Revision history

2025-08-24 #3
Referenz(en) aufgenommen: EUVD-2025-25502
2025-08-21 #2
Referenz(en) aufgenommen: EUVD-2025-25443, EUVD-2025-25442
2025-08-06 #1
Initiale Fassung

References

Ubiquity Security Advisory Bulletin vom 2025-08-06
https://community.ui.com/releases/Security-Advisory-Bulletin-052-052/ac1251ee-5bb5-4cdf-8a71-68acd1775bb6