Description
A malicious actor with access to the management network could execute a remote code execution (RCE) by exploiting a heap buffer overflow vulnerability in the UniFi Protect Cameras (Version 4.75.43 and earlier) firmware.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ubiquiti | UniFi Protect Cameras | 4.75.62 – < 4.75.62 | 4.75.62 |
Advisories 1
- WID-SEC-2025-0947 Ubiquiti UniFi (Protect Cameras und Application): Mehrere Schwachstellen BSI CERT-Bund (WID) · May 6, 2025