Vendor
Ubiquiti
151 known vulnerabilities.
Products
Express 7 25
UniFi OS Server 20
Dream Machines 18
Dream Wall 18
Dream Routers 18
Cloud Gateways 18
UniFi Network Application 16
EdgeRouter X 14
Express 12
UniFi Protect Application 12
Enterprise Fortress Gateway 11
Cloud Keys 11
Network Video Recorders 11
Enterprise Firewall Core 11
Network Attached Storage 10
UDM 9
UDM-Pro 9
UDM-SE 9
UDM-Pro-Max 9
EFG 9
UDW 9
UCG-Max 9
UDM-Beast 8
UDR 8
UDR7 8
UDR-5G 8
UNVR 8
UNVR-Pro 8
UCKP 8
UCK 8
UCK-Enterprise 8
UCG-Ultra 8
UCG-Fiber 8
UCG-Industrial 8
UniFi Access Application 8
UNVR-Instant 7
UNVR-G2 7
UNVR-G2-Pro 7
ENVR 7
ENVR-Core 7
70 results · Clear filters · Feed
-
High 7.8
A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerabi…
-
High 7.5
A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found …
-
High 7.1
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF)…
-
High 8.8
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF)…
-
High 8.8
A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in…
-
High 8.8
A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Sc…
-
High 8.6
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Prot…
-
High 8.1
A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vu…
-
High 7.5
A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi …
-
High 7.5
A malicious actor with access to the network could exploit an Uncontrolled Recursion vulnerability found in certain Uni…
-
High 7.5
A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi g…
-
High 7.5
A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi g…
-
High 7.5
A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi …
-
High 7.5
A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi …
-
High 8.8
A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-en…
-
High 8.2
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Conn…
-
High 8.8
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability …
-
High 8.1
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability …
-
High 7.5
A malicious actor with access to the network and under certain conditions could exploit an Incorrect Authorization vuln…
-
High 8.3
A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper Acce…
-
High 7.5
A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper …
-
High 7.5
A malicious actor with access to the network could exploit a Server-Side Request Forgery (SSRF) vulnerability found in …
-
High 8.6
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Access Applica…
-
High 8.8
A malicious actor with access to the network and low privileges could exploit an authenticated SQL Injection vulnerabil…
-
High 7.5
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Protect Floodl…
-
High 7.7
A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) to e…
-
High 7.5
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CO…
-
High 7.5
A malicious actor with access to the network and under certain conditions could exploit an Improper Initialization vuln…
-
High 8.7
A malicious actor with access to the network and high privileges could exploit a Path Traversal vulnerability found in …
-
High 8.6
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices runn…
-
High 8.8
A malicious actor with access to the network and low privileges could exploit a series of authenticated SQL Injection v…
-
High 8.6
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Prot…
-
High 8.6
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Prot…
-
High 7.5
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Ne…
-
High 8.1
Under certain network configurations, a malicious actor with access to network could exploit an Improper Access Control…
-
High 8.6
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in certain devices runn…
-
High 7.7
A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in U…
-
High 7.5
An Improper Input Validation vulnerability could allow a malicious actor with access to the UniFi Play network to cause…
-
High 7.5
An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to obtain …
-
High 7.5
UniFi Network Controller Improper Certificate Validation Leading to Credential Theft via MITM
UniFi Network Controller before version 5.10.22 and 5.11.x before 5.11.18 contains an improper certificate verification vulnerability that allows adjacent network attackers to conduct man-in-the-middle attacks by presenting a false SSL certificate during SMTP…