Description
A command injection vulnerability in the DHCP Client function of all UniFi Access Points and Switches, excluding the Switch Flex Mini, could allow a Remote Code Execution (RCE).
Affected Products:
All UniFi Access Points (Version 6.5.53 and earlier)
All UniFi Switches (Version 6.5.32 and earlier)
-USW Flex Mini excluded.
Mitigation:
Update UniFi Access Points to Version 6.5.62 or later.
Update UniFi Switches to Version 6.5.59 or later.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ubiquiti | UniFi Access Points | 6.5.53 – ≤ 6.5.53 | — |
| Ubiquiti | UniFi Switches | 6.5.32 – ≤ 6.5.32 | — |
Advisories 1
- WID-SEC-2023-2094 Ubiquiti UniFi Access Points und Switches: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Aug 17, 2023