Description
A Command Injection vulnerability found in a Self-Hosted UniFi Network Servers (Linux) with UniFi Network Application (Version 8.3.32 and earlier) allows a malicious actor with unifi user shell access to escalate privileges to root on the host device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ubiquiti | UniFi Network Application | 8.4.59 – < 8.4.59 | 8.4.59 |
Advisories 1
- WID-SEC-2024-2039 Ubiquiti UniFi: Schwachstelle ermöglicht Privilegieneskalation BSI CERT-Bund (WID) · Sep 3, 2024