Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ubiquiti UniFi Play PowerAmp und Audio Port ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand zu verursachen.
Product
UniFi ist Ubiquiti's End-to-End-Netzwerk-Ökosystem für Unternehmen und Smart Homes.
Vulnerabilities 5
-
Critical 9.8
A malicious actor with access to the UniFi Play network could exploit a Path Traversal vulnerability found in the devic…
-
Critical 9.8
A series of Improper Input Validation vulnerabilities could allow a Command Injection by a malicious actor with access …
-
Critical 9.8
An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to enable …
-
High 7.5
An Improper Input Validation vulnerability could allow a malicious actor with access to the UniFi Play network to cause…
-
High 7.5
An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to obtain …
Revision history
-
#1
Initiale Fassung
References
-
Ubiquiti Security Advisory Bulletin 063 vom 2026-04-13
https://community.ui.com/releases/Security-Advisory-Bulletin-063/e468dd4b-5090-4ef8-89d8-939903c08e83