Skip to content
OpenAdvisories
Unscored CVE-2020-8188 EUVD-2020-29066GHSA-7w4m-8p49-vggp

We have recently released new version of UniFi Protect firmware v1.13.3 and v1.14.10 for Unifi Cloud Key Gen2 Plus and UniFi Dream Machine …

Published Jul 2, 2020 · Updated Aug 4, 2024 · Assigned by hackerone

Description

We have recently released new version of UniFi Protect firmware v1.13.3 and v1.14.10 for Unifi Cloud Key Gen2 Plus and UniFi Dream Machine Pro/UNVR respectively that fixes vulnerabilities found on Protect firmware v1.13.2, v1.14.9 and prior according to the description below:View only users can run certain custom commands which allows them to assign themselves unauthorized roles and escalate their privileges.

Affected products

VendorProductAffectedFixed
— Protect for UniFi Cloud Key Gen2 Plus, UniFi Dream Machine Pro, UNVR Fixed in versions: v1.13.3 and v1.14.10 —

References