Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-24285 EUVD-2025-25502GHSA-5fjw-g444-whhx

Multiple Improper Input Validation vulnerabilities in UniFi Connect EV Station Lite may allow a Command Injection by a malicious actor with…

Published Aug 21, 2025 · Updated Feb 26, 2026 · Assigned by hackerone

Description

Multiple Improper Input Validation vulnerabilities in UniFi Connect EV Station Lite may allow a Command Injection by a malicious actor with network access to the UniFi Connect EV Station Lite.

Affected Products:
UniFi Connect EV Station Lite (Version 1.5.1 and earlier)

Mitigation:
Update UniFi Connect EV Station Lite to Version 1.5.2 or later

Affected products

VendorProductAffectedFixed
Ubiquiti UniFi Connect EV Station Lite 1.5.2 – < 1.5.2 1.5.2

Advisories 1

References