Description
A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (Version 8.0.28 and earlier) allows a malicious actor with UniFi Network Application Administrator credentials to escalate privileges to root on the host device.
Affected Products:
UniFi Network Application (Version 8.0.28 and earlier) .
Mitigation:
Update UniFi Network Application to Version 8.1.113 or later.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ubiquiti | UniFi Network Application | 8.1.113 – < 8.1.113 | 8.1.113 |
Advisories 1
- WID-SEC-2024-0712 Ubiquiti UniFi: Schwachstelle ermöglicht Privilegieneskalation BSI CERT-Bund (WID) · Nov 18, 2024