Skip to content
OpenAdvisories

Product · Ubiquiti

UniFi Network Controller

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2019-25652

    UniFi Network Controller Improper Certificate Validation Leading to Credential Theft via MITM

    UniFi Network Controller before version 5.10.22 and 5.11.x before 5.11.18 contains an improper certificate verification vulnerability that allows adjacent network attackers to conduct man-in-the-middle attacks by presenting a false SSL certificate during SMTP…

    Ubiquiti UniFi Network Controller Network devices
  • High 8.3
    CVE-2019-25651

    Ubiquiti UniFi Devices Use of AES-CBC Allows Key Recovery and Unauthorized Device Control

    Ubiquiti UniFi Network Controller prior to 5.10.12 (excluding 5.6.42), UAP FW prior to 4.0.6, UAP-AC, UAP-AC v2, and UAP-AC Outdoor FW prior to 3.8.17, USW FW prior to 4.0.6, USG FW prior to 4.4.34 uses AES-CBC encryption for device-to-controller communicatio…

    Ubiquiti UniFi Network Controller UniFi UAP-AC Firmware UniFi USG Firmware Network devices